8.1
High
CVE-2026-3144 IBM API Connect 12.1.0.0 through 12.1.0.3 uses default credentials which could allow an attacker to gain unauthorized…
Description
IBM API Connect 12.1.0.0 through 12.1.0.3 uses default credentials which could allow an attacker to gain unauthorized access to the application before the system enforces a credential update.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| API Connect 12.1 | 12.1.0.0 → < 12.1.0.3 | 12.1.0.3 |