Skip to content
NewA calmer, faster ZeroHour
VulnerabilitycriticalExploited in the wild

Critical CVSS 9.8 Flaw Found in IBM API Connect Authentication System

The Hacker Newsby @TheHackersNews ()1 min read3 · 1 read
Analyze CVE-2025-13915 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2025-13915
IBM API Connect 10.0.8.0 through 10.0.8.5, and 10.0.11.0 could allow a remote attacker to bypass authentication mechanisms and gain unauthorized access to the…
9.89%

From the original article

1 min read at thehackernews.com

 Ravie Lakshmanan  Dec 31, 2025 API Security / Vulnerability IBM has disclosed details of a critical security flaw in API Connect that could allow attackers to gain remote access to the application. The vulnerability, tracked as CVE-2025-13915 , is rated 9. 8 out of a maximum of 10.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.