{"id":"CVE-2026-114468","aliases":["EUVD-2026-125814","GHSA-fjjg-pp3h-v9vp"],"status":"published","title":"IBM App Connect Operator and IBM App Connect Enterprise Certified Containers Operands Hard-coded Credentials","description":"IBM App Connect Operator and App Connect Enterprise Certified Containers Operands could allow an attacker with the ability to run HTTP calls within the running container to can make administrative calls to a running IntegrationRuntime.","severity":{"version":"3.1","score":6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","level":"medium","assessor":"cna","from":"cve"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-798"],"published":"2026-11-13T21:59:04.689Z","modified":"2026-11-14T00:31:44Z","products":[{"vendor":"ibm","product":"app connect enterprise certified containers operands"},{"vendor":"ibm","product":"app connect operator"}],"references":[{"url":"https://www.ibm.com/support/pages/node/7296008","tags":["vendor-advisory","patch"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-114468"},{"url":"https://github.com/advisories/GHSA-fjjg-pp3h-v9vp"}],"sources":{"cve":[{"id":"CVE-2026-114468","title":"IBM App Connect Operator and IBM App Connect Enterprise Certified Containers Operands Hard-coded Credentials","description":"IBM App Connect Operator and App Connect Enterprise Certified Containers Operands could allow an attacker with the ability to run HTTP calls within the running container to can make administrative calls to a running IntegrationRuntime.","status":"published","published":"2026-11-13T21:59:04.689Z","modified":"2026-11-13T22:01:38.463Z","cvss":[{"version":"3.1","score":6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-798"],"updated_at":"2026-11-13T23:38:02.096181Z"}],"euvd":[{"id":"EUVD-2026-125814","description":"IBM App Connect Operator and App Connect Enterprise Certified Containers Operands could allow an attacker with the ability to run HTTP calls within the running container to can make administrative calls to a running IntegrationRuntime.","status":"published","published":"2026-11-14T00:31:43Z","modified":"2026-11-14T00:31:43Z","cvss":[{"version":"3.1","score":6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","level":"medium"}],"updated_at":"2026-11-14T01:42:05.230204Z"}],"ghsa":[{"id":"GHSA-fjjg-pp3h-v9vp","title":"IBM App Connect Operator and App Connect Enterprise Certified Containers Operands could allow an...","description":"IBM App Connect Operator and App Connect Enterprise Certified Containers Operands could allow an attacker with the ability to run HTTP calls within the running container to can make administrative calls to a running IntegrationRuntime.","status":"published","published":"2026-11-14T00:31:43Z","modified":"2026-11-14T00:31:44Z","cvss":[{"version":"3.1","score":6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","level":"medium"}],"cwes":["CWE-798"],"updated_at":"2026-11-14T00:56:48.734103Z"}],"nvd":[{"id":"CVE-2026-114468","description":"IBM App Connect Operator and App Connect Enterprise Certified Containers Operands could allow an attacker with the ability to run HTTP calls within the running container to can make administrative calls to a running IntegrationRuntime.","status":"published","published":"2026-11-13T22:17:21.447Z","modified":"2026-11-13T22:17:21.553Z","cvss":[{"version":"3.1","score":6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-798"],"updated_at":"2026-11-13T23:38:08.103555Z"}]}}