PT-2026-139161

CVE-2026-19121

·

Published

2026-11-07

·

Updated

2026-11-07

Description by

CVSS 3.1
8.3
High
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
IBM API Connect 12.1.0.0 through 12.1.1.2 could allow an authenticated attacker to gain unauthorized access due to improper authorization. Tenant context is not sufficiently verified against the authenticated user, which could allow access to another tenant's resources.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-290: Authentication Bypass by Spoofing
Related identifiers
CVE-2026-19121
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com