CVE-2026-19122
LOW
NVD
CVSS Score
3.8
Severity
LOW
Published
Nov 07, 2026
Vendor
unknown
Description
IBM API Connect 12.1.0.0 through 12.1.1.2 could allow an authenticated privileged attacker to send unauthorized requests from the system due to server-side request forgery. This could be used to enumerate network resources or to support further attacks.