API Connect (V12.1.0.0 Through V12.1.1.2) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/api-connect-v12.1.0.0-through-v12.1.1.2/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioSat, 07 Nov 2026 05:52:05 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgIBM API Connect: Authentication bypass via improper signature verification (CVE-2026-17301)https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-auth-bypass-23fef13b/Sat, 07 Nov 2026 05:52:05 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-auth-bypass-23fef13b/IBM API Connect contains a critical authentication bypass vulnerability (CVE-2026-17301) due to improper cryptographic signature verification, allowing unauthenticated attackers to gain unauthorized access.IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 are susceptible to an authentication bypass vulnerability. This flaw arises from the improper verification of cryptographic signatures, which an unauthenticated attacker could potentially exploit to bypass security controls and gain unauthorized access to the application.

Impact

Successful exploitation allows an unauthenticated attacker to bypass authentication, potentially resulting in unauthorized access to API management functions and sensitive data. The vulnerability is rated with a CVSS v3.1 base score of 9.8.

Recommendation

  • Inventory all instances of IBM API Connect within the environment to identify systems running the vulnerable version ranges (10.0.8.0-10.0.8.12 and 12.1.0.0-12.1.1.2).
  • Review IBM security advisories for the release of security patches addressing CVE-2026-17301 and apply the appropriate update immediately upon availability.
  • Monitor API gateway access logs for anomalous authentication patterns or requests targeting sensitive endpoints originating from unauthorized sources.
]]>criticaladvisoryvulnerabilityauthentication-bypassapi-security