CVE

CVE-2025-13915

9.8: CVSS 3.1
1: story

Severity: 9.8 Critical · vendor score
Published: Dec 26, 2025
Weakness: CWE-305

What it is

IBM API Connect 10.0.8.0 through 10.0.8.5, and 10.0.11.0 could allow a remote attacker to bypass authentication mechanisms and gain unauthorized access to the application.

From the National Vulnerability Database

Decipher coverage · 1 story

Newest first ↑

JAN 6
VulnerabilitiesIBM Warns of Critical Auth Bypass Bug in API ConnectIBM published updates for the affected versions of API Connect on Jan. 2., and urged organizations to update affected versions as soon as possible.DENNIS FISHER · 1 MIN

Official references

3 sources

Registries

RegistryNVDScore, weakness and every reference RegistryCVE.orgThe official CVE record

Advisories, fixes & analysis

Vendor advisoryibm.com/support/pages/node/7255149