{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/api-connect-12.1.0.0---12.1.1.2/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ibm:api_connect:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.1,"id":"CVE-2026-17319"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["API Connect (12.1.0.0 - 12.1.1.2)"],"_cs_severities":["medium"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["IBM"],"content_html":"\u003cp\u003eIBM API Connect versions 12.1.0.0 through 12.1.1.2 are susceptible to an improper authorization vulnerability (CVE-2026-17319). By relying on client-supplied information to manage authorization, the application permits authenticated remote attackers to perform unauthorized configuration changes that result in service disruption.\u003c/p\u003e\n","date_modified":"2026-11-07T06:08:11Z","date_published":"2026-11-07T06:08:11Z","id":"https://feed.craftedsignal.io/briefs/2026-11-07-ibm-api-connect-authorization-flaw/","summary":"IBM API Connect versions 12.1.0.0 through 12.1.1.2 contain an improper authorization vulnerability. The application relies on client-supplied information to enforce authorization decisions, allowing a remote authenticated attacker to modify tool configurations and cause a denial of service.","title":"IBM API Connect: Improper authorization flaw (CVE-2026-17319)","url":"https://feed.craftedsignal.io/briefs/2026-11-07-ibm-api-connect-authorization-flaw/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ibm:api_connect:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.5,"id":"CVE-2026-17228"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["API Connect (12.1.0.0 - 12.1.1.2)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["IBM"],"content_html":"\u003cp\u003eIBM API Connect versions 12.1.0.0 through 12.1.1.2 are susceptible to a server-side request forgery (SSRF) vulnerability. This flaw allows a remote authenticated attacker to bypass destination restrictions on outbound requests, potentially enabling the retrieval of content from unintended resources.\u003c/p\u003e\n","date_modified":"2026-11-07T06:04:52Z","date_published":"2026-11-07T06:04:52Z","id":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-ssrf-6def7b9c/","summary":"IBM API Connect versions 12.1.0.0 through 12.1.1.2 contain a server-side request forgery (SSRF) vulnerability that allows a remote authenticated attacker to bypass destination restrictions and retrieve content from unintended resources.","title":"IBM API Connect: Server-side request forgery vulnerability (CVE-2026-17228)","url":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-ssrf-6def7b9c/"}],"language":"en","title":"CraftedSignal Threat Feed - API Connect (12.1.0.0 - 12.1.1.2)","version":"https://jsonfeed.org/version/1.1"}