https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-17444.htmlhttps://patchthecve.com/cve/CVE-2026-17444.htmlThu, 10 Sep 2026 21:17:21 +0000MEDIUM 5.3: IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection.https://patchthecve.com/cve/CVE-2026-17443.htmlhttps://patchthecve.com/cve/CVE-2026-17443.htmlWed, 09 Sep 2026 16:10:14 +0000MEDIUM 5.3: IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.https://patchthecve.com/cve/CVE-2026-17442.htmlhttps://patchthecve.com/cve/CVE-2026-17442.htmlThu, 10 Sep 2026 16:17:08 +0000MEDIUM 5.1: IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obtain sensitive information due to credentials being written to trace logs in cleartext.https://patchthecve.com/cve/CVE-2026-17440.htmlhttps://patchthecve.com/cve/CVE-2026-17440.htmlWed, 09 Sep 2026 14:12:06 +0000MEDIUM 5.5: IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to cause a denial of service due to uncontrolled recursion.https://patchthecve.com/cve/CVE-2026-16689.htmlhttps://patchthecve.com/cve/CVE-2026-16689.htmlTue, 08 Sep 2026 18:17:35 +0000MEDIUM 6.2: IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obtain sensitive information due to improper logging of credentials.https://patchthecve.com/cve/CVE-2026-16180.htmlhttps://patchthecve.com/cve/CVE-2026-16180.htmlWed, 09 Sep 2026 14:43:01 +0000MEDIUM 5.7: IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 Toolkit could allow an authenticated user to cause a denial-of-service condition due to improper validation of XML entities.https://patchthecve.com/cve/CVE-2026-78543.htmlhttps://patchthecve.com/cve/CVE-2026-78543.htmlWed, 09 Sep 2026 14:50:54 +0000MEDIUM 5.3: IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote attacker to cause a denial of service due to an infinite loop.https://patchthecve.com/cve/CVE-2026-19649.htmlhttps://patchthecve.com/cve/CVE-2026-19649.htmlWed, 09 Sep 2026 14:55:42 +0000MEDIUM 6.2: IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obtain sensitive information due to improper logging of database credentials.https://patchthecve.com/cve/CVE-2026-81832.htmlhttps://patchthecve.com/cve/CVE-2026-81832.htmlTue, 08 Sep 2026 21:59:22 +0000HIGH 7.7: IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 SAP Adapter is vulnerable to an XML external entity (XXE) attack.