{"id":"CVE-2026-19126","aliases":[],"cve":{"records":[{"id":"CVE-2026-19126","source":"ibm","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-08-06T15:48:31.118Z","published":"2026-11-07T04:34:43.881Z","modified":"2026-11-08T01:29:20.542Z"}],"publishers":[{"name":"ibm","role":"CNA","organizationId":"9a959283-ebb5-44b6-b705-dcc2bbced522","modified":"2026-11-07T04:34:43.881Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-08T01:29:20.542Z"}],"references":[{"url":"https://www.ibm.com/support/pages/node/7295635","tags":["vendor-advisory","patch"],"source":"ibm"},{"url":"https://www.ibm.com/support/pages/node/7295637","tags":["vendor-advisory","patch"],"source":"ibm"}],"weaknesses":[{"id":"CWE-916","description":"CWE-916 Use of Password Hash With Insufficient Computational Effort","source":"ibm"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-08T01:28:24.376898Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"partial"}]}]},"title":"Multiple Vulnerabilities in IBM API Connect","titleSource":"ibm","descriptionSource":"ibm","description":"IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.","score":5.9,"severity":"medium","published":"2026-11-07T04:34:43.881Z","modified":"2026-11-08T01:29:20.542Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"IBM","name":"API Connect","platforms":[],"versions":[{"version":"12.1.0.0","status":"affected","lessThanOrEqual":"12.1.1.2","versionType":"semver"},{"version":"10.0.8.0","status":"affected","lessThanOrEqual":"10.0.8.12","versionType":"semver"}],"cpes":["cpe:2.3:a:ibm:api_connect:12.1.0.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:api_connect:12.1.1.2:*:*:*:*:*:*:*","cpe:2.3:a:ibm:api_connect:10.0.8.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:api_connect:10.0.8.12:*:*:*:*:*:*:*"],"source":"ibm","url":"https://www.cve.org/CVERecord?id=CVE-2026-19126"}],"remediation":[{"text":"IBM strongly recommends addressing the vulnerability now by upgrading to v12.1.1.3\nFix Central Link:  https://www.ibm.com/support/pages/node/7290205 \n\n\n\nIBM strongly recommends addressing the vulnerability now by upgrading to 10.0.8.13Fix Central Link: https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7EWebSphere&product=ibm/WebSphere/IBM+API+Connect&release=10.0.8.12&platform=All&function=all","source":"ibm","url":"https://www.cve.org/CVERecord?id=CVE-2026-19126"}],"references":["https://www.ibm.com/support/pages/node/7295635","https://www.ibm.com/support/pages/node/7295637"],"sources":[{"name":"CVE","id":"CVE-2026-19126","modified":"2026-11-08T01:29:20.542Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-19126"}],"assessments":[{"source":"ibm","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","score":5.9}],"sourceAffected":[],"observedAt":"2026-11-08T01:35:47.737Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T02:30:32.029Z"},"coverage":[{"source":"NVD","status":"no-result","checkedAt":"2026-11-07T04:55:34.413Z","attemptedAt":"2026-11-07T04:55:34.413Z"},{"source":"GHSA","status":"no-result","checkedAt":"2026-11-07T04:55:34.413Z","attemptedAt":"2026-11-07T04:55:34.413Z"},{"source":"EUVD","status":"no-result","checkedAt":"2026-11-07T04:55:34.413Z","attemptedAt":"2026-11-07T04:55:34.413Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-11-07T04:55:34.413Z","attemptedAt":"2026-11-07T04:55:34.413Z"}],"evidence":[],"aiSummary":{"text":"IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 use weaker cryptographic algorithms, which could allow an attacker to decrypt sensitive information. The weakness is related to insufficient computational effort in password hashing. Affected versions may be vulnerable to information decryption.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-07T04:46:06.901Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-19126"}]}}