{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/api-connect-10.0.8.0-10.0.8.12/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ibm:api_connect:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9,"id":"CVE-2026-17403"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["API Connect (10.0.8.0-10.0.8.12)","API Connect (12.1.0.0-12.1.1.2)"],"_cs_severities":["critical"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["IBM"],"content_html":"\u003cp\u003eIBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 contain a vulnerability involving the use of hard-coded credentials. This vulnerability could allow a remote attacker to gain full administrative control. The CVSS v3.1 base score for this vulnerability is 9.0.\u003c/p\u003e\n","date_modified":"2026-11-07T07:51:02Z","date_published":"2026-11-07T07:51:02Z","id":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-hardcoded-credentials-2a126a9b/","summary":"IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 contain hard-coded credentials that allow a remote attacker to gain full administrative control.","title":"IBM API Connect: Hard-coded credentials remote administrative access (CVE-2026-17403)","url":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-hardcoded-credentials-2a126a9b/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ibm:api_connect:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.9,"id":"CVE-2026-17399"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["API Connect (10.0.8.0-10.0.8.12)","API Connect (12.1.0.0-12.1.1.2)"],"_cs_severities":["critical"],"_cs_tags":["cve-2026-17399","remote-code-execution","api-security"],"_cs_type":"advisory","_cs_vendors":["IBM"],"content_html":"\u003cp\u003eIBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 contain an authenticated remote code execution vulnerability identified as CVE-2026-17399. The flaw originates from the application's failure to adequately validate content prior to processing uploaded files. A remote authenticated attacker can leverage this to trigger arbitrary code execution on the underlying server.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows for arbitrary code execution on the server hosting the IBM API Connect software. This grants the attacker potential control over the application environment and the ability to access or manipulate data managed by the API gateway.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIdentify all instances of IBM API Connect in the infrastructure and verify the version numbers against the affected ranges.\u003c/li\u003e\n\u003cli\u003eApply the latest vendor security patches provided by IBM to remediate CVE-2026-17399.\u003c/li\u003e\n\u003cli\u003eRestrict administrative or file-upload access to the IBM API Connect management interfaces to trusted users only to minimize the risk of exploitation by compromised credentials.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-07T05:56:07Z","date_published":"2026-11-07T05:56:07Z","id":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-rce-1f38ddf0/","summary":"IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 contain a vulnerability allowing remote authenticated users to execute arbitrary code via insufficient validation of uploaded content.","title":"IBM API Connect: Remote authenticated code execution (CVE-2026-17399)","url":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-rce-1f38ddf0/"}],"language":"en","title":"CraftedSignal Threat Feed - API Connect (10.0.8.0-10.0.8.12)","version":"https://jsonfeed.org/version/1.1"}