Product
high
advisory
IBM API Connect: Path traversal information disclosure (CVE-2026-16880)
1 CVEIBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 contain a path traversal vulnerability that could allow a remote authenticated attacker to obtain sensitive information.
IBM API Connect 10.0.8.0 through 10.0.8.12 +1
1c
high
advisory
IBM API Connect: Improper authorization information disclosure (CVE-2026-16712)
1 CVEIBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information from other tenants due to improper authorization.
IBM API Connect 10.0.8.0 through 10.0.8.12 +1
1c
critical
advisory
IBM API Connect: Information disclosure via attribute modification (CVE-2026-17394)
1 CVEIBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 contain a vulnerability that could allow a remote authenticated attacker to obtain sensitive information due to improperly controlled modification of object attributes.
IBM API Connect 10.0.8.0 through 10.0.8.12 +1
1c