https://feed.craftedsignal.io/products/api-connect-12.1.0.0---12.1.1.2/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioSat, 07 Nov 2026 06:08:11 +0000https://feed.craftedsignal.io/favicon-32x32.pnghttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svghttps://feed.craftedsignal.io/briefs/2026-11-07-ibm-api-connect-authorization-flaw/Sat, 07 Nov 2026 06:08:11 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-07-ibm-api-connect-authorization-flaw/IBM API Connect versions 12.1.0.0 through 12.1.1.2 contain an improper authorization vulnerability. The application relies on client-supplied information to enforce authorization decisions, allowing a remote authenticated attacker to modify tool configurations and cause a denial of service.<p>IBM API Connect versions 12.1.0.0 through 12.1.1.2 are susceptible to an improper authorization vulnerability (CVE-2026-17319). By relying on client-supplied information to manage authorization, the application permits authenticated remote attackers to perform unauthorized configuration changes that result in service disruption.</p> mediumadvisoryhttps://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-ssrf-6def7b9c/Sat, 07 Nov 2026 06:04:52 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-ssrf-6def7b9c/IBM API Connect versions 12.1.0.0 through 12.1.1.2 contain a server-side request forgery (SSRF) vulnerability that allows a remote authenticated attacker to bypass destination restrictions and retrieve content from unintended resources.<p>IBM API Connect versions 12.1.0.0 through 12.1.1.2 are susceptible to a server-side request forgery (SSRF) vulnerability. This flaw allows a remote authenticated attacker to bypass destination restrictions on outbound requests, potentially enabling the retrieval of content from unintended resources.</p> highadvisory