{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/api-connect-12.1.0.0-through-12.1.1.2/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ibm:api_connect:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.1,"id":"CVE-2026-17338"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["API Connect (12.1.0.0 through 12.1.1.2)"],"_cs_severities":["critical"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["IBM"],"content_html":"\u003cp\u003eIBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to broken object-level authorization. This vulnerability has a CVSS v3.1 base score of 9.1.\u003c/p\u003e\n","date_modified":"2026-11-07T09:57:53Z","date_published":"2026-11-07T09:57:53Z","id":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-bola-65f79a78/","summary":"IBM API Connect versions 12.1.0.0 through 12.1.1.2 contain a broken object-level authorization vulnerability that could allow a remote authenticated attacker to obtain sensitive information.","title":"IBM API Connect: Broken Object-Level Authorization (CVE-2026-17338)","url":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-bola-65f79a78/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ibm:api_connect:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.9,"id":"CVE-2026-17134"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["API Connect (12.1.0.0 through 12.1.1.2)"],"_cs_severities":["critical"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["IBM"],"content_html":"\u003cp\u003eIBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to SQL injection. The vulnerability has a CVSS v3.1 base score of 9.9.\u003c/p\u003e\n","date_modified":"2026-11-07T09:57:33Z","date_published":"2026-11-07T09:57:33Z","id":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-sql-injection-6310ded5/","summary":"IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to SQL injection.","title":"IBM API Connect: SQL Injection (CVE-2026-17134)","url":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-sql-injection-6310ded5/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ibm:api_connect:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.5,"id":"CVE-2026-17187"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["API Connect (12.1.0.0 through 12.1.1.2)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["IBM"],"content_html":"\u003cp\u003eIBM API Connect versions 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of user-supplied URLs. The vulnerability has a CVSS v3.1 base score of 8.5.\u003c/p\u003e\n","date_modified":"2026-11-07T07:51:38Z","date_published":"2026-11-07T07:51:38Z","id":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-vulnerability-7c251cd7/","summary":"IBM API Connect versions 12.1.0.0 through 12.1.1.2 contain a vulnerability involving improper validation of user-supplied URLs that allows a remote authenticated attacker to obtain sensitive information.","title":"IBM API Connect: Sensitive information disclosure via URL validation (CVE-2026-17187)","url":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-vulnerability-7c251cd7/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ibm:api_connect:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.3,"id":"CVE-2026-17131"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["API Connect (12.1.0.0 through 12.1.1.2)"],"_cs_severities":["critical"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["IBM"],"content_html":"\u003cp\u003eIBM API Connect versions 12.1.0.0 through 12.1.1.2 are affected by a server-side request forgery (SSRF) vulnerability. This flaw allows a remote attacker to bypass restrictions on outbound requests, enabling the server to contact unintended destinations and return the response to the attacker.\u003c/p\u003e\n","date_modified":"2026-11-07T07:50:05Z","date_published":"2026-11-07T07:50:05Z","id":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-ssrf-219850f9/","summary":"IBM API Connect versions 12.1.0.0 through 12.1.1.2 contain a server-side request forgery (SSRF) vulnerability that may allow a remote attacker to obtain sensitive information.","title":"IBM API Connect: Server-side request forgery (CVE-2026-17131)","url":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-ssrf-219850f9/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ibm:api_connect:12.1.0.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:api_connect:12.1.1.2:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.7,"id":"CVE-2026-17320"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["API Connect (12.1.0.0 through 12.1.1.2)"],"_cs_severities":["high"],"_cs_tags":["idor","vulnerability","api-security"],"_cs_type":"advisory","_cs_vendors":["IBM"],"content_html":"\u003cp\u003eIBM API Connect versions 12.1.0.0 through 12.1.1.2 contain an Insecure Direct Object Reference (IDOR) vulnerability identified as CVE-2026-17320. This vulnerability allows a remote authenticated attacker to access sensitive information by manipulating direct object references within the application. No patch availability or remediation steps are explicitly detailed in the current NVD advisory.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows a remote authenticated attacker to bypass authorization controls and retrieve sensitive information, leading to unauthorized data exposure.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInventory all instances of IBM API Connect within the environment to identify systems running versions 12.1.0.0 through 12.1.1.2.\u003c/li\u003e\n\u003cli\u003eMonitor vendor security portals for the release of security patches or configuration guidance to mitigate CVE-2026-17320.\u003c/li\u003e\n\u003cli\u003eAudit API access logs for anomalous patterns where authenticated users request resources outside their typical scope or ID ranges.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-07T06:08:22Z","date_published":"2026-11-07T06:08:22Z","id":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-idor-88459b41/","summary":"IBM API Connect versions 12.1.0.0 through 12.1.1.2 are vulnerable to an Insecure Direct Object Reference (IDOR) flaw, allowing a remote authenticated attacker to access sensitive information.","title":"IBM API Connect: Insecure direct object reference (CVE-2026-17320)","url":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-idor-88459b41/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ibm:api_connect:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.7,"id":"CVE-2026-17318"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["API Connect (10.0.8.0 through 10.0.8.12)","API Connect (12.1.0.0 through 12.1.1.2)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["IBM"],"content_html":"\u003cp\u003eIBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 are susceptible to an improper authorization vulnerability (CVE-2026-17318). This issue may allow a remote authenticated attacker to obtain sensitive information. The vulnerability has a CVSS v3.1 base score of 7.7.\u003c/p\u003e\n","date_modified":"2026-11-07T06:07:59Z","date_published":"2026-11-07T06:07:59Z","id":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-auth-bypass-714ce6e5/","summary":"IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 contain an improper authorization vulnerability that could allow a remote authenticated attacker to obtain sensitive information.","title":"IBM API Connect: Improper authorization information disclosure (CVE-2026-17318)","url":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-auth-bypass-714ce6e5/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ibm:api_connect:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.1,"id":"CVE-2026-17311"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["API Connect (12.1.0.0 through 12.1.1.2)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["IBM"],"content_html":"\u003cp\u003eIBM API Connect versions 12.1.0.0 through 12.1.1.2 contain a broken object-level authorization vulnerability, identified as CVE-2026-17311. This flaw allows a remote authenticated attacker to modify application API subscriptions.\u003c/p\u003e\n","date_modified":"2026-11-07T06:07:39Z","date_published":"2026-11-07T06:07:39Z","id":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-bola-840f7577/","summary":"IBM API Connect versions 12.1.0.0 through 12.1.1.2 are vulnerable to a broken object-level authorization flaw that allows a remote authenticated attacker to modify application API subscriptions.","title":"IBM API Connect: Broken object-level authorization (CVE-2026-17311)","url":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-bola-840f7577/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ibm:api_connect:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.6,"id":"CVE-2026-17129"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["API Connect (12.1.0.0 through 12.1.1.2)"],"_cs_severities":["medium"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["IBM"],"content_html":"\u003cp\u003eIBM API Connect versions 12.1.0.0 through 12.1.1.2 are susceptible to an Insecure Direct Object Reference (IDOR) vulnerability. A remote authenticated attacker can exploit this to obtain sensitive information and cause a denial of service.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows unauthorized disclosure of sensitive information and denial of service.\u003c/p\u003e\n","date_modified":"2026-11-07T06:02:10Z","date_published":"2026-11-07T06:02:10Z","id":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-idor/","summary":"IBM API Connect versions 12.1.0.0 through 12.1.1.2 contain an insecure direct object reference vulnerability that allows remote authenticated attackers to obtain sensitive information and cause a denial of service.","title":"IBM API Connect: Insecure direct object reference (CVE-2026-17129)","url":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-idor/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ibm:api_connect:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.7,"id":"CVE-2026-16717"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["API Connect (12.1.0.0 through 12.1.1.2)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["IBM"],"content_html":"\u003cp\u003eIBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to broken object-level authorization.\u003c/p\u003e\n","date_modified":"2026-11-07T06:00:55Z","date_published":"2026-11-07T06:00:55Z","id":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-bola-ca26976c/","summary":"IBM API Connect versions 12.1.0.0 through 12.1.1.2 are vulnerable to broken object-level authorization, which may allow a remote authenticated attacker to obtain sensitive information.","title":"IBM API Connect: Broken Object-Level Authorization (CVE-2026-16717)","url":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-bola-ca26976c/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ibm:api_connect:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.4,"id":"CVE-2026-18838"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["API Connect (12.1.0.0 through 12.1.1.2)"],"_cs_severities":["critical"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["IBM"],"content_html":"\u003cp\u003eIBM API Connect versions 12.1.0.0 through 12.1.1.2 are susceptible to a vulnerability due to improper authentication. Identity information provided in requests is not sufficiently verified, allowing remote attackers to impersonate other users. This can lead to the unauthorized disclosure of sensitive information and the modification of API configurations.\u003c/p\u003e\n","date_modified":"2026-11-07T05:56:57Z","date_published":"2026-11-07T05:56:57Z","id":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-auth-bypass-98f35000/","summary":"IBM API Connect versions 12.1.0.0 through 12.1.1.2 contain an improper authentication vulnerability that allows a remote attacker to obtain sensitive information and modify API configurations.","title":"IBM API Connect: Improper authentication vulnerability (CVE-2026-18838)","url":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-auth-bypass-98f35000/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ibm:api_connect:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.9,"id":"CVE-2026-17402"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["API Connect (10.0.8.0 through 10.0.8.12)","API Connect (12.1.0.0 through 12.1.1.2)"],"_cs_severities":["critical"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["IBM"],"content_html":"\u003cp\u003eIBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 are vulnerable to OS command injection. This issue occurs because user-supplied input is not properly neutralized before being passed to the underlying operating system, which could allow commands to run on the host.\u003c/p\u003e\n","date_modified":"2026-11-07T05:56:14Z","date_published":"2026-11-07T05:56:14Z","id":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-rce-dd61e43a/","summary":"IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 contain an OS command injection vulnerability that allows a remote authenticated attacker to execute arbitrary commands.","title":"IBM API Connect: Remote command execution (CVE-2026-17402)","url":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-rce-dd61e43a/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ibm:api_connect:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.8,"id":"CVE-2026-17360"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["API Connect (12.1.0.0 through 12.1.1.2)"],"_cs_severities":["critical"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["IBM"],"content_html":"\u003cp\u003eIBM API Connect versions 12.1.0.0 through 12.1.1.2 are affected by a vulnerability involving the use of hard-coded credentials. This could allow a remote attacker to gain full administrative control.\u003c/p\u003e\n","date_modified":"2026-11-07T05:55:35Z","date_published":"2026-11-07T05:55:35Z","id":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-hardcoded-credentials/","summary":"IBM API Connect versions 12.1.0.0 through 12.1.1.2 contain hard-coded credentials that could allow a remote attacker to gain full administrative control.","title":"IBM API Connect: Hard-coded credentials remote administrative access (CVE-2026-17360)","url":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-hardcoded-credentials/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ibm:api_connect:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.9,"id":"CVE-2026-17359"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["API Connect (10.0.8.0 through 10.0.8.12)","API Connect (12.1.0.0 through 12.1.1.2)"],"_cs_severities":["critical"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["IBM"],"content_html":"\u003cp\u003eCVE-2026-17359 affects IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2. The vulnerability allows a remote authenticated attacker to execute arbitrary code due to improper control of the generation of code, where a user-supplied value can influence the generated code.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows for arbitrary code execution.\u003c/p\u003e\n","date_modified":"2026-11-07T05:55:25Z","date_published":"2026-11-07T05:55:25Z","id":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-rce-77cf3018/","summary":"IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 are vulnerable to remote code execution. A remote authenticated attacker can influence product-generated code via user-supplied values, leading to arbitrary code execution.","title":"IBM API Connect: Remote code execution (CVE-2026-17359)","url":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-rce-77cf3018/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ibm:api_connect:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.6,"id":"CVE-2026-17353"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["API Connect (12.1.0.0 through 12.1.1.2)"],"_cs_severities":["critical"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["IBM"],"content_html":"\u003cp\u003eIBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information and bypass security restrictions due to server-side request forgery.\u003c/p\u003e\n","date_modified":"2026-11-07T05:55:09Z","date_published":"2026-11-07T05:55:09Z","id":"https://feed.craftedsignal.io/briefs/2026-11-cve-2026-17353/","summary":"IBM API Connect versions 12.1.0.0 through 12.1.1.2 are vulnerable to server-side request forgery, which may allow a remote authenticated attacker to obtain sensitive information and bypass security restrictions.","title":"IBM API Connect: SSRF information disclosure and security bypass (CVE-2026-17353)","url":"https://feed.craftedsignal.io/briefs/2026-11-cve-2026-17353/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ibm:api_connect:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.8,"id":"CVE-2026-17340"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["API Connect (12.1.0.0 through 12.1.1.2)"],"_cs_severities":["critical"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["IBM"],"content_html":"\u003cp\u003eIBM API Connect versions 12.1.0.0 through 12.1.1.2 allow a remote attacker to execute arbitrary code due to a path traversal vulnerability. This vulnerability has a CVSS v3.1 Base Score of 9.8.\u003c/p\u003e\n","date_modified":"2026-11-07T05:54:46Z","date_published":"2026-11-07T05:54:46Z","id":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-cve-2026-17340/","summary":"IBM API Connect versions 12.1.0.0 through 12.1.1.2 are vulnerable to a path traversal vulnerability that allows a remote attacker to execute arbitrary code.","title":"IBM API Connect: Path traversal remote code execution (CVE-2026-17340)","url":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-cve-2026-17340/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ibm:api_connect:12.1.0.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:api_connect:12.1.1.2:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.1,"id":"CVE-2026-17339"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["API Connect (12.1.0.0 through 12.1.1.2)"],"_cs_severities":["critical"],"_cs_tags":["path-traversal","web-application","api-security"],"_cs_type":"advisory","_cs_vendors":["IBM"],"content_html":"\u003cp\u003eIBM API Connect versions 12.1.0.0 through 12.1.1.2 are susceptible to a path traversal vulnerability. This flaw allows a remote, authenticated attacker to manipulate API requests to access or delete resources belonging to other tenants within the multi-tenant environment.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows for unauthorized cross-tenant data access and the potential destruction of sensitive API resources, leading to a loss of data confidentiality and integrity.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInventory all deployments of IBM API Connect to identify instances running versions 12.1.0.0 through 12.1.1.2.\u003c/li\u003e\n\u003cli\u003eMonitor vendor channels for the release of security patches or configuration workarounds for CVE-2026-17339.\u003c/li\u003e\n\u003cli\u003eImplement strict request validation and object-level authorization checks at the API gateway layer for all tenant-specific endpoints until updates are applied.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-07T05:54:39Z","date_published":"2026-11-07T05:54:39Z","id":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-traversal/","summary":"IBM API Connect versions 12.1.0.0 through 12.1.1.2 contain a path traversal vulnerability that permits a remote authenticated attacker to perform unauthorized access or deletion of resources belonging to other tenants.","title":"IBM API Connect: Path traversal vulnerability (CVE-2026-17339)","url":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-traversal/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ibm:api_connect:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.9,"id":"CVE-2026-17336"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["API Connect (12.1.0.0 through 12.1.1.2)"],"_cs_severities":["critical"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["IBM"],"content_html":"\u003cp\u003eIBM API Connect 12.1.0.0 through 12.1.1.2 contains a vulnerability where improper neutralization of special elements used in an SQL command could allow a remote authenticated attacker to execute arbitrary SQL commands. This vulnerability carries a CVSS v3.1 base score of 9.9.\u003c/p\u003e\n","date_modified":"2026-11-07T05:54:23Z","date_published":"2026-11-07T05:54:23Z","id":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-sql-injection/","summary":"IBM API Connect versions 12.1.0.0 through 12.1.1.2 are vulnerable to remote SQL injection, allowing authenticated attackers to execute arbitrary SQL commands.","title":"IBM API Connect: Remote SQL Injection (CVE-2026-17336)","url":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-sql-injection/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ibm:api_connect:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.3,"id":"CVE-2026-17329"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["API Connect (12.1.0.0 through 12.1.1.2)"],"_cs_severities":["critical"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["IBM"],"content_html":"\u003cp\u003eIBM API Connect 12.1.0.0 through 12.1.1.2 contains a vulnerability that could allow a remote attacker to obtain sensitive information due to improper validation of endpoint URLs. The vulnerability has a CVSS v3.1 base score of 9.3.\u003c/p\u003e\n","date_modified":"2026-11-07T05:54:14Z","date_published":"2026-11-07T05:54:14Z","id":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-vuln/","summary":"IBM API Connect versions 12.1.0.0 through 12.1.1.2 are vulnerable to a remote information disclosure flaw caused by improper validation of endpoint URLs.","title":"IBM API Connect: Sensitive information disclosure (CVE-2026-17329)","url":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-vuln/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ibm:api_connect:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.8,"id":"CVE-2026-17313"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["API Connect (12.1.0.0 through 12.1.1.2)"],"_cs_severities":["critical"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["IBM"],"content_html":"\u003cp\u003eIBM API Connect versions 12.1.0.0 through 12.1.1.2 are susceptible to an authentication bypass vulnerability via an alternate path. This flaw may allow a remote attacker to obtain sensitive information and take control of gateway configuration.\u003c/p\u003e\n","date_modified":"2026-11-07T05:54:03Z","date_published":"2026-11-07T05:54:03Z","id":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-auth-bypass-0e2483c6/","summary":"IBM API Connect versions 12.1.0.0 through 12.1.1.2 contain an authentication bypass vulnerability that allows a remote attacker to obtain sensitive information and take control of gateway configuration.","title":"IBM API Connect: Authentication bypass via alternate path (CVE-2026-17313)","url":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-auth-bypass-0e2483c6/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ibm:api_connect:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.8,"id":"CVE-2026-17278"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["API Connect (12.1.0.0 through 12.1.1.2)"],"_cs_severities":["critical"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["IBM"],"content_html":"\u003cp\u003eIBM API Connect versions 12.1.0.0 through 12.1.1.2 are affected by a vulnerability (CVE-2026-17278) due to improper authentication. Information supplied by the client is not sufficiently verified, which could allow a remote attacker to appear as a trusted party and gain unauthorized access to sensitive API catalog and runtime configuration data.\u003c/p\u003e\n","date_modified":"2026-11-07T05:51:18Z","date_published":"2026-11-07T05:51:18Z","id":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-auth-bypass-074a2eb3/","summary":"IBM API Connect versions 12.1.0.0 through 12.1.1.2 contain an improper authentication vulnerability that allows a remote attacker to impersonate a trusted party and access sensitive API catalog and runtime configuration data.","title":"IBM API Connect: Unauthorized access via improper authentication (CVE-2026-17278)","url":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-auth-bypass-074a2eb3/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ibm:api_connect:12.1.0.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:api_connect:12.1.1.2:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.9,"id":"CVE-2026-17049"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["API Connect (12.1.0.0 through 12.1.1.2)"],"_cs_severities":["critical"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["IBM"],"content_html":"\u003cp\u003eIBM API Connect versions 12.1.0.0 through 12.1.1.2 contain a critical authorization bypass vulnerability (CVE-2026-17049). An attacker with existing authenticated access can manipulate user-controlled keys to bypass authorization checks, enabling unauthorized information disclosure and modification of arbitrary documents within the environment.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows a remote authenticated attacker to read sensitive data and modify arbitrary documents, potentially leading to full compromise of data integrity and confidentiality within the API Connect environment.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInventory all instances of IBM API Connect within the environment to identify versions 12.1.0.0 through 12.1.1.2.\u003c/li\u003e\n\u003cli\u003eApply the latest vendor security patches to remediate CVE-2026-17049 immediately.\u003c/li\u003e\n\u003cli\u003eReview access logs and API audit trails for suspicious patterns of unauthorized document modification or unexpected data retrieval requests associated with authenticated user accounts.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-07T05:49:54Z","date_published":"2026-11-07T05:49:54Z","id":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-auth-bypass-d844761e/","summary":"IBM API Connect versions 12.1.0.0 through 12.1.1.2 are vulnerable to an authorization bypass allowing remote authenticated attackers to access sensitive information and modify arbitrary documents.","title":"IBM API Connect: Authorization bypass (CVE-2026-17049)","url":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-auth-bypass-d844761e/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ibm:api_connect:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.9,"id":"CVE-2026-16920"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["API Connect (12.1.0.0 through 12.1.1.2)"],"_cs_severities":["critical"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["IBM"],"content_html":"\u003cp\u003eIBM API Connect versions 12.1.0.0 through 12.1.1.2 contain a confused deputy vulnerability that allows a remote authenticated attacker to bypass security restrictions. This vulnerability has been assigned a CVSS v3.1 base score of 9.9.\u003c/p\u003e\n","date_modified":"2026-11-07T05:49:46Z","date_published":"2026-11-07T05:49:46Z","id":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-bypass/","summary":"IBM API Connect versions 12.1.0.0 through 12.1.1.2 are vulnerable to a confused deputy flaw that allows a remote authenticated attacker to bypass security restrictions.","title":"IBM API Connect: Security restriction bypass (CVE-2026-16920)","url":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-bypass/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ibm:api_connect:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.9,"id":"CVE-2026-16884"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["API Connect (12.1.0.0 through 12.1.1.2)"],"_cs_severities":["critical"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["IBM"],"content_html":"\u003cp\u003eIBM API Connect versions 12.1.0.0 through 12.1.1.2 are susceptible to an XML external entity (XXE) injection. This vulnerability could allow a remote attacker to obtain sensitive information.\u003c/p\u003e\n","date_modified":"2026-11-07T05:49:28Z","date_published":"2026-11-07T05:49:28Z","id":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-xxe/","summary":"IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to an XML external entity (XXE) injection.","title":"IBM API Connect: XML External Entity (XXE) injection (CVE-2026-16884)","url":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-xxe/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ibm:api_connect:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.8,"id":"CVE-2026-16720"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["API Connect (10.0.8.0 through 10.0.8.12)","API Connect (12.1.0.0 through 12.1.1.2)"],"_cs_severities":["critical"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["IBM"],"content_html":"\u003cp\u003eIBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 contain an improper authentication vulnerability. Authentication against a connected directory service is not sufficiently enforced, which could allow a remote attacker to assume another user's identity by obtaining valid access tokens. The CVSS v3.1 base score for this vulnerability is 9.8.\u003c/p\u003e\n","date_modified":"2026-11-07T05:49:19Z","date_published":"2026-11-07T05:49:19Z","id":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-auth-bypass/","summary":"IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 are vulnerable to improper authentication, which could allow a remote attacker to obtain valid access tokens for other users.","title":"IBM API Connect: Improper authentication vulnerability (CVE-2026-16720)","url":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-auth-bypass/"}],"language":"en","title":"CraftedSignal Threat Feed - API Connect (12.1.0.0 Through 12.1.1.2)","version":"https://jsonfeed.org/version/1.1"}