What is the CVSS score of CVE-2026-14519?

CVE-2026-14519 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.6%.

Which versions of IBM App Connect Enterprise are affected by CVE-2026-14519?

IBM App Connect Enterprise (versions 12.0.1.0-12.0.12.27 and 13.0.1.0-13.0.7.2) contains an unauthenticated path traversal vulnerability enabling remote attackers to read arbitrary files, creating…. A patch is available.

How to fix or mitigate CVE-2026-14519?

Within 24 hours, identify all instances of IBM App Connect Enterprise in versions 12.0.1.0-12.0.12.27 and 13.0.1.0-13.0.7.2 across production, staging, and development environments using asset inventory or scanning tools. Within 7 days, plan and test the vendor-released patch in a staging environment matching production configurations, document rollback procedures, and coordinate change windows with business stakeholders. Within 30 days, deploy the patched versions to all affected systems following your organization's change management process, beginning with production instances, and validate remediation by confirming systems are no longer vulnerable through vendor-provided verification methods.

IBM App Connect Enterprise CVE-2026-14519

EUVD-2026-51136 HIGH

Path Traversal (CWE-22)

2026-07-30 ibm

GHSA-778p-m8r5-6r9r

IBM Path Traversal App Connect Enterprise

7.5

CVSS 3.1 · Vendor: ibm

Severity by source

Vendor (ibm) PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

vuln.today AI

7.5 HIGH

Remote unauthenticated file read over the network with low complexity (AV:N/AC:L/PR:N/UI:N); read-only disclosure gives C:H but no integrity or availability impact.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (ibm).

CVSS VectorVendor: ibm

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Jul 30, 2026 - 15:25 vuln.today

CVE Published

Jul 30, 2026 - 14:05 nvd

HIGH 7.5

DescriptionCVE.org

IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to read arbitrary files due to a path traversal vulnerability.

AnalysisAI

Arbitrary file read in IBM App Connect Enterprise (versions 13.0.1.0 through 13.0.7.2 and 12.0.1.0 through 12.0.12.27) allows a remote, unauthenticated attacker to retrieve files outside the intended directory via a path traversal flaw (CWE-22), scoring CVSS 7.5. The vector (AV:N/AC:L/PR:N/UI:N) indicates network-reachable exploitation with no privileges or user interaction, though impact is confined to confidentiality (C:H/I:N/A:N). There is no public exploit identified at time of analysis and it is not in CISA KEV, but the low-complexity, no-auth profile makes it a straightforward disclosure risk once details are known.

Technical ContextAI

IBM App Connect Enterprise (ACE, the successor to IBM Integration Bus) is an enterprise integration runtime used to build and host message flows, APIs, and connectors that mediate between applications, message queues, and backend systems. The root cause is CWE-22 (Improper Limitation of a Pathname to a Restricted Directory), meaning user-supplied input used to locate a file is not properly canonicalized or constrained, so sequences such as '../' let a request resolve to files outside the intended web/integration root. The single affected CPE, cpe:2.3:a:ibm:app_connect_enterprise:*:*:*:*:*:*:*:*, confirms the flaw is in the ACE product itself rather than a bundled third-party component. Because ACE typically runs integration server HTTP listeners and administrative/API endpoints, a traversal in a file-serving or resource-loading path would expose OS files, configuration, or secrets readable by the ACE service account.

RemediationAI

Patch available per vendor advisory: upgrade to the IBM-provided fixed level for your branch as documented at https://www.ibm.com/support/pages/node/7281897 (apply the fix pack or interim fix that supersedes 13.0.7.2 for the v13 line and 12.0.12.27 for the v12 line; confirm the exact target build against the IBM bulletin, as specific fix versions were not enumerated in the input data). If immediate patching is not possible, restrict network exposure of ACE integration server HTTP/admin listeners by placing them behind an authenticating reverse proxy or WAF with path-normalization and '../' filtering, and firewall the listener ports so they are reachable only from trusted management networks - the trade-off is reduced accessibility for legitimate remote API consumers. Additionally, run the ACE service under a least-privilege OS account so any successful traversal reads as little sensitive filesystem content as possible, and rotate any credentials or keystores that may have been exposed if compromise is suspected.