CVE-2026-3144CWE-1392

IBM API Connect Default Credentials

High · published July 8, 2026

CVSS v3.1
8.1
EPSS
0%
Percentile
34.4
In the wild
Unconfirmed
What it is

IBM API Connect 12.1.0.0 through 12.1.0.3 uses default credentials which could allow an attacker to gain unauthorized access to the application before the system enforces a credential update.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00412 · 34.4th percentile
Weakness
CWE-1392 · Use of Default Credentials
Published
2026-07-08T15:22Z
EPSS history
Timeline
  • 08 JUL 15:22Z
    IBM API Connect Default Credentials
    cvelistv5