IBM API Connect: Denial of Service via uncontrolled resource consumption (CVE-2026-17279)
IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 are susceptible to a remote authenticated denial of service attack caused by uncontrolled resource consumption.
CVE search metadata
CVE search record: CVE-2026-17279. Severity: high. CVSS: 7.7. KEV: no. Product: API Connect (10.0.8.0-10.0.8.12, 12.1.0.0-12.1.1.2). Brief: IBM API Connect: Denial of Service via uncontrolled resource consumption (CVE-2026-17279). Brief link: https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-dos/
Triage facts
Revision 1- Applicability
- API Connect (10.0.8.0-10.0.8.12, 12.1.0.0-12.1.1.2)
- Evidence
- Unknown
- Severity
- Low
- Action
- Elevated
- Sources
- 1 public source
- Freshness
- Revision 1Nov 7, 07:51 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A1Roughly even chance
IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 contain a vulnerability that permits an authenticated remote attacker to perform a denial of service attack. By sending specially crafted requests, an attacker can trigger uncontrolled resource consumption within the system, resulting in stalled internal processing and service unavailability.
Impact
Successful exploitation results in service unavailability, preventing legitimate users from accessing API Connect services. The vulnerability carries a CVSS v3.1 base score of 7.7.
Recommendation
Inventory all instances of IBM API Connect within the environment and verify version numbers against the affected ranges. Monitor vendor security updates and apply patches as they become available to remediate CVE-2026-17279.
Immediate actions
Inventory IBM API Connect deployments to identify versions 10.0.8.0-10.0.8.12 and 12.1.0.0-12.1.1.2.
Threat Hunt
Identify authenticated API requests that result in excessive internal processing time or 5xx server errors.
Data: API Gateway access logs, Application performance monitoring (APM) logs
Mitigations
Apply vendor-supplied patches for CVE-2026-17279 upon release.
CVE-2026-17279