API Connect 12.1.0.0 Through 12.1.1.2 - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/api-connect-12.1.0.0-through-12.1.1.2/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioSat, 07 Nov 2026 07:51:56 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgIBM API Connect: Broken object-level authorization (CVE-2026-17282)https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-bola-7f82f3f6/Sat, 07 Nov 2026 07:51:56 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-bola-7f82f3f6/IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 allow a remote authenticated attacker to obtain sensitive information due to broken object-level authorization.<p>IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to broken object-level authorization (CVE-2026-17282).</p> highadvisory