CVE-2026-115788

HighCVSS 8.1/10Last modified Nov 13, 2026

Description

IBM App Connect Operator and IBM App Connect Enterprise Certified Containers Operands is vulnerable to Log Forging on a request to create a resource.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-117

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Nov 13, 2026
Last modified
Nov 13, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-115795.3The Kali Forms — Contact Form & Drag-and-Drop Builder WordPress plugin before 2.4.17 does not verify that a file upload is made against an eCVE-2026-1157915.3When tarfile or zipfile command line interface (CLI) is used to decompress an archive, a Python script shadowing the stdlib can be createdCVE-2026-1157938.7P-Net before 1.0.3 does not release the RPC session allocated for an RPC request that names an unknown interface or object UUID, and does noCVE-2026-1157942.3P-Net before 1.0.3 passes the application alarm callback a data length derived from the variable part length field of a received RTA alarm fCVE-2026-1157955.3P-Net before 1.0.3 does not check that a complete block header is present in the received data before reading the next block in DCP Set and CVE-2026-1157964.3A security flaw has been discovered in Tenda F6 12.02.01.73. This impacts an unknown function of the component Web Management Interface. PerCVE-2026-1157973.7A weakness has been identified in Tenda F6 12.02.01.73. Affected is an unknown function of the component Web Management Interface. ExecutingCVE-2026-11588.8A security flaw has been discovered in Totolink LR350 9.3.5u.6369_B20220309. This vulnerability affects the function setWizardCfg of the filCVE-2026-115805.5The Kali Forms — Contact Form & Drag-and-Drop Builder WordPress plugin before 2.4.17 does not perform a per-object capability check in its pCVE-2026-1158005.3A vulnerability was identified in UbiquitousLearning mllm up to 2.0.2. The affected element is the function load_model of the file pymllm/moCVE-2026-1158015.3A security flaw has been discovered in Kakao khaiii up to 0.4. The impacted element is the function khaiii::nn::Linear::open of the file srcCVE-2026-1158024.3A weakness has been identified in InternScience InternAgent 1.5.0. This affects the function train of the file tasks/AutoChem/code/experimen
CVE-2026-115788: High severity, CVSS 8.1 | Vulnix