---
id: "CVE-2026-19126"
page: "https://infrastack.ai/live/CVE-2026-19126"
kind: "vulnerability"
aliases: ["CVE-2026-19126"]
title: "IBM API Connect: weak cryptography could let attackers decrypt sensitive data"
severity: "medium"
cvss: 5.9
epss: null
exploited: false
status: "open"
category: "vendor"
products: []
ecosystems: []
tags: ["api-gateway", "ibm-api-connect", "vendor"]
not_affected_if: ["version-outside-affected-ranges"]
published_at: "2026-11-07T05:19:00+00:00"
first_seen_at: "2026-11-07T05:46:08+00:00"
updated_at: "2026-11-07T05:52:50+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19126", "first_seen_at": "2026-11-07T05:46:08+00:00"}]
exploit_sources: []
---

# IBM API Connect: weak cryptography could let attackers decrypt sensitive data

Link for people: https://infrastack.ai/live/CVE-2026-19126 (this .md is for agents)

IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 use cryptographic algorithms weaker than expected. An attacker who can capture the encrypted data could decrypt highly sensitive information.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed IBM API Connect version against the affected ranges 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2

## Timeline

- 2026-11-07T05:46:08+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-19126

## From the sources

IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_