Is CVE-2026-9074 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-9074?

CVE-2026-9074 has a CVSS v3 severity of CRITICAL (9.1).

Back

CVE-2026-9074

Description

IBM API Connect 10.0.8.0 through 10.0.8.9 and 12.1.0.0 through 12.1.0.3 contains an unauthenticated SQL injection vulnerability in the password reset functionality.