CVE-2026-19128
HIGH
NVD
CVSS Score
7.5
Severity
HIGH
Published
Nov 07, 2026
Vendor
unknown
Description
IBM API Connect 12.1.0.0 through 12.1.1.2 could allow an authenticated attacker to send unauthorized requests from the system due to server-side request forgery. This could be used to enumerate network resources or to support further attacks.