CVE-2026-114468
IBM App Connect Operator and IBM App Connect Enterprise Certified Containers Operands Hard-coded Credentials
CVE-2026-114468 is a medium vulnerability (CVSS 6.0) in Ibm App Connect Enterprise Certified Containers Operands, published November 13, 2026. No source lists public exploit code. No source names a fixed version.
- Severity
- 6.0 MediumCVSS 3.1, CVE List
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
IBM App Connect Operator and App Connect Enterprise Certified Containers Operands could allow an attacker with the ability to run HTTP calls within the running container to can make administrative calls to a running IntegrationRuntime.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- High
- Availability
- High
What each source reports
CVE List Score used
IBM App Connect Operator and IBM App Connect Enterprise Certified Containers Operands Hard-coded Credentials
IBM App Connect Operator and App Connect Enterprise Certified Containers Operands could allow an attacker with the ability to run HTTP calls within the running container to can make administrative calls to a running IntegrationRuntime.
- Record
CVE-2026-114468- CVSS 3.1
- 6.0 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H - Weakness
- CWE-798
- Updated
- 2026-11-13
EUVDEUVD-2026-125814
IBM App Connect Operator and App Connect Enterprise Certified Containers Operands could allow an attacker with the ability to run HTTP calls within the running container to can make administrative calls to a running IntegrationRuntime.
- Record
EUVD-2026-125814- CVSS 3.1
- 6.0 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H - Updated
- 2026-11-14
GitHub AdvisoriesGHSA-fjjg-pp3h-v9vp
IBM App Connect Operator and App Connect Enterprise Certified Containers Operands could allow an...
IBM App Connect Operator and App Connect Enterprise Certified Containers Operands could allow an attacker with the ability to run HTTP calls within the running container to can make administrative calls to a running IntegrationRuntime.
- Record
GHSA-fjjg-pp3h-v9vp- CVSS 3.1
- 6.0 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H - Weakness
- CWE-798
- Updated
- 2026-11-14
NVD
IBM App Connect Operator and App Connect Enterprise Certified Containers Operands could allow an attacker with the ability to run HTTP calls within the running container to can make administrative calls to a running IntegrationRuntime.
- Record
CVE-2026-114468- CVSS 3.1
- 6.0 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H - Weakness
- CWE-798
- Updated
- 2026-11-13
History
| Recorded | Changed | Sources |
|---|---|---|
| published | EUVD | |
| aliases, references | GitHub Advisories | |
| aliases, published | EUVD, NVD | |
| title | CVE List | |
| first indexed | CVE List |
Dates are when Every CVE recorded each change. Upstream dates may differ.