CVE-2026-18535

Name of the Vulnerable Software and Affected Versions IBM API Connect versions 10.0.8.0 through 10.0.8.12 IBM API Connect versions 12.1.0.0 through 12.1.1.2

Description The software is susceptible to a Regular Expression Denial of Service (ReDoS), which occurs when a complex regular expression is processed, causing excessive CPU usage and system instability. Additionally, the system fails to properly neutralize wildcard query operators, which can be leveraged to trigger a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.