{"id":"CVE-2026-19126","kind":"vulnerability","aliases":["CVE-2026-19126"],"related":[],"title":"IBM API Connect: weak cryptography could let attackers decrypt sensitive data","description":"IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.","summary":"IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 use cryptographic algorithms weaker than expected. An attacker who can capture the encrypted data could decrypt highly sensitive information.","severity":"medium","cvss":5.9,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["api-gateway","ibm-api-connect","vendor"],"not_affected_if":["version-outside-affected-ranges"],"how_to_check":"- Check the installed IBM API Connect version against the affected ranges 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2","fix":null,"status":"open","published_at":"2026-11-07T05:19:00+00:00","first_seen_at":"2026-11-07T05:46:08+00:00","triaged_at":"2026-11-07T05:52:50+00:00","updated_at":"2026-11-07T05:52:50+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-11-07T05:52:50Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"IBM API Connect: weak cryptography could let attackers decrypt sensitive data","impact":"medium","summary":"IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 use cryptographic algorithms weaker than expected. An attacker who can capture the encrypted data could decrypt highly sensitive information.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["ibm-api-connect","api-gateway"],"confidence":0.6,"fix_status":"unknown","needs_auth":"unknown","worst_case":"sensitive encrypted information can be decrypted by an attacker","analyst_note":"Check the IBM security bulletin for the fixed version and the exact algorithms and configuration affected; source is only NVD at https://nvd.nist.gov/vuln/detail/CVE-2026-19126.","how_to_check":"- Check the installed IBM API Connect version against the affected ranges 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2\n- unknown for other checks: the sources do not say which configuration or component uses the weak algorithms","plain_action":"","needs_analyst":true,"not_affected_if":["version-outside-affected-ranges"],"who_is_affected":"Organizations running IBM API Connect in the affected version ranges 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2. The sources do not say which deployment configurations or data paths use the weak algorithms, so unknown whether all installations are exposed.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000731,"input_tokens":4232,"output_tokens":616,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-19126':14A,17A '-2026':13A,16A '10.0.8.0':30B,59C '10.0.8.12':32B,61C '12.1.0.0':34B,63C '12.1.1.2':36B,65C 'algorithm':39B,71C 'allow':74C 'api':2A,19B,23B,27B,57C 'api-gateway':18B 'attack':8A,44B,76C 'captur':47B 'connect':3A,24B,28B,58C 'could':6A,51B,73C 'cryptograph':38B,70C 'cryptographi':5A 'cve':12A,15A 'data':11A,50B 'decrypt':9A,52B,78C 'encrypt':49B 'expect':42B,69C 'gateway':20B 'high':53B,79C 'ibm':1A,22B,26B,56C 'ibm-api-connect':21B 'inform':55B,81C 'let':7A 'sensit':10A,54B,80C 'use':37B,66C 'vendor':25B 'version':29B 'weak':4A 'weaker':40B,67C","nicknames":[],"mitigations":[],"who_affected":"Organizations running IBM API Connect in the affected version ranges 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2. The sources do not say which deployment configurations or data paths use the weak algorithms, so unknown whether all installations are exposed.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["apigateway","ibmapiconnect","medium","vendor"],"campaign_type":null,"search_a":"'-19126':14A,17A '-2026':13A,16A 'api':2A 'attack':8A 'connect':3A 'could':6A 'cryptographi':5A 'cve':12A,15A 'data':11A 'decrypt':9A 'ibm':1A 'let':7A 'sensit':10A 'weak':4A","search_b":"'10.0.8.0':30B '10.0.8.12':32B '12.1.0.0':34B '12.1.1.2':36B 'algorithm':39B 'api':19B,23B,27B 'api-gateway':18B 'attack':44B 'captur':47B 'connect':24B,28B 'could':51B 'cryptograph':38B 'data':50B 'decrypt':52B 'encrypt':49B 'expect':42B 'gateway':20B 'high':53B 'ibm':22B,26B 'ibm-api-connect':21B 'inform':55B 'sensit':54B 'use':37B 'vendor':25B 'version':29B 'weaker':40B","search_c":"'10.0.8.0':59C '10.0.8.12':61C '12.1.0.0':63C '12.1.1.2':65C 'algorithm':71C 'allow':74C 'api':57C 'attack':76C 'connect':58C 'could':73C 'cryptograph':70C 'decrypt':78C 'expect':69C 'high':79C 'ibm':56C 'inform':81C 'sensit':80C 'use':66C 'weaker':67C","first_public_at":"2026-11-07T05:19:00+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss_by":"psirt@us.ibm.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-19126","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19126","severity":null,"published_at":"2026-11-07T05:19:00+00:00","modified_at":"2026-11-07T05:19:00+00:00","first_seen_at":"2026-11-07T05:46:08+00:00","fetched_at":"2026-11-07T05:46:08+00:00","note":null}],"documents":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}