CVE-2026-17133

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.

  • Published Sep 14, 2026
  • CVSS 7.8 high
  • 0.1% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-17133 at the National Vulnerability Database