IBM API Connect (10.0.8.0-10.0.8.12, 12.1.0.0-12.1.1.2) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/ibm-api-connect-10.0.8.0-10.0.8.12-12.1.0.0-12.1.1.2/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioSat, 07 Nov 2026 06:06:10 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgIBM API Connect: Server-side request forgery (CVE-2026-17288)https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-ssrf-7c61d43d/Sat, 07 Nov 2026 06:06:10 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-ssrf-7c61d43d/IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 contain a server-side request forgery (SSRF) vulnerability that allows a remote authenticated attacker to obtain sensitive information.<p>IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 are susceptible to server-side request forgery (SSRF). This vulnerability may allow a remote authenticated attacker to obtain sensitive information.</p> highadvisory