HIGHCVSS v3.1 8.3Vulnerability
CVE-2026-19121
IBM API Connect 12.1.0.0 through 12.1.1.2 could allow an authenticated attacker to gain unauthorized access due to improper authorization. Tenant context is not sufficiently verified against the authenticated user, which could allow access to another tenant's resources.
Properties
- Severity
- HIGH
- Nvd fetched at
- 2026-11-07T06:40:34.987550+00:00
- Cvss severity
- HIGH
- Cvss score
- 8.3
- Retrieved at
- 2026-11-07T06:41:39+00:00
- Score
- 8.3
- Cvss version
- 3.1
- Last source
- NVD
- Cve id
- CVE-2026-19121
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
- First seen by Signal
- 2026-11-07T06:41:39+00:00
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
- Published at
- 2026-11-07T05:18:59.963
- Last modified
- 2026-11-07T05:19:00.093
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph