What is the CVSS score of EUVD-2026-40385?

EUVD-2026-40385 has a CVSS 3.1 base score of 5.5 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N. EPSS exploitation probability: 0.2%.

Is there a patch available for EUVD-2026-40385?

Yes, a patch is available for EUVD-2026-40385. Update the affected software to the latest version immediately.

IBM App Connect Enterprise EUVD-2026-40385

| CVE-2026-3602 MEDIUM

External Control of File Name or Path (CWE-73)

2026-06-30 ibm

GHSA-w878-7352-758p

IBM SQLi App Connect Enterprise Integration Bus For Z Os

5.5

CVSS 3.1 · NVD

Severity by source

Vendor (ibm) PRIMARY

MEDIUM

qualitative

NVD

5.5 MEDIUM

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

vuln.today AI

4.7 MEDIUM

Social engineering drives UI:R and AC:H; file creation is local (AV:L); attacker needs no system privileges (PR:N); only integrity is impacted via unauthorized file writes.

3.1 AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N

4.0 AV:L/AC:H/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (ibm).

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

None

Lifecycle Timeline

CVSS changed

Jul 02, 2026 - 18:22 NVD

4.7 (MEDIUM) 5.5 (MEDIUM)

Analysis Generated

Jun 30, 2026 - 19:55 vuln.today

DescriptionNVD

IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.26 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 is vulnerable to SQL injection. A remote attacker could socially engineer a user into accidentally creating files they may not be aware of.

AnalysisAI

File path control vulnerability (CWE-73) in IBM App Connect Enterprise and IBM Integration Bus for z/OS enables a remote attacker to socially engineer a victim into triggering unauthorized file creation on the local system. Despite being tagged and described as SQL injection, the governing weakness classification is CWE-73 (External Control of File Name or Path), and the described impact - unexpected local file creation - aligns with that CWE rather than database injection. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Identify target IBM ACE user

Delivery

Craft malicious file path payload

Exploit

Deliver payload via social engineering (phishing/pretexting)

Execution

Victim triggers vulnerable ACE integration flow

Impact

Unauthorized files written to local filesystem

Access

Identify target IBM ACE user

Delivery

Craft malicious file path payload

Exploit

Deliver payload via social engineering (phishing/pretexting)

Execution

Victim triggers vulnerable ACE integration flow

Impact

Unauthorized files written to local filesystem

Vulnerability AssessmentAI

Exploitation	Exploitation requires that a victim user actively interact with attacker-supplied input - specifically, the attacker must socially engineer the user into triggering the vulnerable code path within an IBM App Connect Enterprise or IIB for z/OS integration flow. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The provided CVSS 3.1 score of 4.7 (Medium) reflects several risk-limiting factors: AV:L (local attack vector, meaning exploitation results in local-system impact), AC:H (high complexity requiring social engineering), and UI:R (mandatory user interaction). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	A remote attacker identifies a user operating IBM App Connect Enterprise and crafts a malicious message or document containing a manipulated file path value. Through social engineering - such as a phishing message instructing the victim to process a specific input - the attacker convinces the user to trigger a vulnerable integration flow, causing the ACE runtime to create one or more files at attacker-specified paths on the local filesystem without the user's awareness. …
Remediation	A vendor-released patch is available per the IBM advisory at https://www.ibm.com/support/pages/node/7278350; however, no exact fixed version number is confirmed from the available input data - administrators should consult the advisory directly to identify the specific target release for their ACE 12.x, ACE 13.x, or IIB for z/OS 10.1.x deployment. … Detailed patch versions, workarounds, and compensating controls in full report.