CVE-2026-2606 | IBM webMethods API Gateway up to 10.11_Fix32/10.15_Fix27/11.1_Fix7 Endpoint /createapi  path traversal

A vulnerability has been found in IBM webMethods API Gateway up to 10.11_Fix32/10.15_Fix27/11.1_Fix7 and classified as critical. Impacted is an unknown function of the file /createapi  of the component Endpoint. The manipulation leads to path traversal.

This vulnerability is uniquely identified as CVE-2026-2606. The attack is possible to be carried out remotely. No exploit exists.

The affected component should be upgraded.