CVE-2026-3144 describes a vulnerability in IBM API Connect 12.1.0.0 through 12.1.0.3 where default credentials are used. This could allow an attacker to gain unauthorized access to the application before the system enforces a credential update. The vulnerability is categorized under CWE-1392 (Use of default credentials). The CVSS v3.1 base score is 8.1, indicating high impact with network attack vector, high attack complexity, no privileges required, no user interaction, and high confidentiality, integrity, and availability impacts. There is no vendor advisory or patch information available at this time, and the product is not a cloud service.

An attacker could exploit the use of default credentials to gain unauthorized access to IBM API Connect before the system forces a credential update. This could lead to full compromise of confidentiality, integrity, and availability of the affected system. The vulnerability has a high severity rating (CVSS 8.1).

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, ensure that default credentials are changed immediately upon deployment to prevent unauthorized access.