IBM API Connect: Server-side request forgery (CVE-2026-17327)

IBM API Connect versions 12.1.0.0 through 12.1.1.2 contain a server-side request forgery (SSRF) vulnerability. An authenticated remote attacker can manipulate requests handled by the API gateway to cause the server to perform unauthorized actions or access sensitive resources. As of the current advisory, there are no documented details regarding the specific API endpoints susceptible to this manipulation or public evidence of in-the-wild exploitation.

Impact

Successful exploitation allows a remote authenticated attacker to perform server-side requests, potentially resulting in the disclosure of sensitive internal information or interaction with protected internal network services.

Recommendation

• Inventory instances of IBM API Connect within the environment to identify versions 12.1.0.0 through 12.1.1.2.
• Monitor the vendor advisory for patch availability and ensure a maintenance window is scheduled for the remediation of CVE-2026-17327.
• Implement restrictive network egress filtering on the API Connect server to limit internal service access, mitigating the impact of potential SSRF exploitation.