Loading story…
dCERT issued two advisories covering multiple vulnerabilities in IBM App Connect Enterprise, indicating ongoing security issues affecting the enterprise integration platform. The advisories, 2026-0874 and 2026-0987, both identify IBM App Connect Enterprise as the impacted product, though no public synopsis was provided in the referenced notices.
The repeated publication of advisories for the same IBM product suggests organizations using App Connect Enterprise should review the associated vendor and dCERT guidance, identify affected versions, and prioritize patching or other mitigations. Security teams should also assess exposure in environments where the platform handles critical application and data flows, as vulnerabilities in integration middleware can create broad operational and security risk.
See real exploitation activity before you spend the cycle.
10 events from the most recent confirmed update back to the earliest known activity.
dCERT published advisory 2026-1422 covering multiple vulnerabilities affecting IBM App Connect Enterprise (Axios). This is a new vulnerability disclosure/update distinct from the earlier dCERT advisories already in the timeline.
dCERT published advisory 2026-1402 for IBM App Connect Enterprise describing a vulnerability that could allow code execution. This is a new vulnerability disclosure/update distinct from the earlier dCERT advisories already in the timeline.
dCERT published advisory 2026-1407 covering multiple vulnerabilities affecting IBM App Connect Enterprise Certified Container. This is a new vulnerability disclosure/update distinct from the earlier dCERT advisories already in the timeline.
dCERT published advisory 2026-1380 for IBM App Connect Enterprise describing a vulnerability that could allow information disclosure. This is a new disclosure/update distinct from the earlier dCERT advisories already in the timeline.
dCERT published advisory 2026-1383 covering multiple vulnerabilities affecting IBM App Connect Enterprise Certified Container. This is a new vulnerability disclosure/update distinct from the earlier dCERT advisories already in the timeline.
dCERT published advisory 2026-1200 covering multiple vulnerabilities affecting IBM App Connect Enterprise. This is a new vulnerability disclosure/update distinct from the earlier dCERT advisories already in the timeline.
dCERT published advisory 2026-1135 covering multiple vulnerabilities affecting IBM App Connect Enterprise. This represents a new vulnerability disclosure or update separate from the earlier dCERT advisories already in the timeline.
dCERT published advisory 2026-1040 for IBM App Connect Enterprise, describing a vulnerability that could allow denial of service. This is a new disclosure/update distinct from the earlier dCERT advisories already in the timeline.
dCERT published a second advisory, 2026-0987, for multiple vulnerabilities in IBM App Connect Enterprise. This represents a new disclosure or update distinct from the earlier advisory.
dCERT published advisory 2026-0874 covering multiple vulnerabilities affecting IBM App Connect Enterprise. The reference indicates this was a vulnerability disclosure event.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
10 references tracked. Mallory keeps watching after this page renders.
dcert.de
Open sourcedcert.de
Open sourcedcert.de
Open sourcedcert.de
Open sourcedcert.de
Open sourcedcert.de
Open sourcedcert.de
Open sourcedcert.de
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
CISA released a series of Industrial Control System (ICS) security advisories addressing vulnerabilities in a wide range of products from vendors such as Advantech, Axis Communications, Hitachi Energy, Inductive Automation, Johnson Controls, Mitsubishi Electric, National Instruments, Rockwell Automation, Schneider Electric, and Siemens. These advisories urge administrators to review mitigation steps and apply available updates to protect critical infrastructure systems from potential exploitation. Separately, IBM published security advisories for multiple enterprise products, including IBM API Connect, CloudPak for AIOps, DataPower Gateway, Db2, QRadar Suite, and Watson services, among others. The advisories highlight critical updates and recommend immediate patching to address identified vulnerabilities. Both CISA and IBM emphasize the importance of timely remediation to reduce risk exposure in operational and enterprise environments.
Jun 29, 2026
German advisory service dCERT published alerts on **multiple vulnerabilities** affecting **IBM QRadar SIEM**, indicating that the security information and event management platform is impacted by more than one flaw requiring attention. The advisories, identified as `2026-0532` and `2026-1639`, both describe the issue as **IBM QRadar SIEM: Multiple Vulnerabilities**. The repeated publication of advisories on the same product suggests ongoing vulnerability tracking or updated disclosure activity around QRadar SIEM. Organizations using IBM QRadar SIEM should review the referenced dCERT advisories and corresponding IBM guidance to determine affected versions, assess exposure, and prioritize remediation for any vulnerable deployments.
Jun 29, 2026
Several major vendors, including Dell, IBM, and CISA, have released security advisories addressing vulnerabilities in a wide range of enterprise and industrial control system products. Dell's advisories cover critical updates for products such as APEX Cloud Platform for Red Hat OpenShift, Enterprise SONiC Distribution, NetWorker, PowerSwitch models, and iDRAC controllers, urging administrators to apply patches to mitigate potential risks. IBM has similarly published advisories for multiple products, while CISA has issued alerts for vulnerabilities in industrial control systems from vendors like ABB, Advantech, Delta Electronics, Fuji Electric, IDIS, Radiometrics, Survision, and Ubia, recommending prompt mitigation and updates. In addition to these broad advisories, a critical denial-of-service vulnerability (CVE-2024-20399) was identified in Cisco's Identity Services Engine (ISE), which could allow unauthenticated attackers to crash network access control systems by exploiting the RADIUS protocol. Cisco has provided both temporary and permanent mitigation steps for affected versions. Separately, CISA added a Samsung Mobile Devices out-of-bounds write vulnerability (CVE-2025-21042) to its Known Exploited Vulnerabilities Catalog, highlighting the ongoing risk posed by actively exploited flaws and urging organizations to prioritize remediation to protect against cyber threats.
Jun 29, 2026