Skip to content
Threat Feed
Subscribe

Product

IBM API Connect 12.1.0.0 Through 12.1.1.2 (12.1.0.0-12.1.1.2)

2 briefs RSS
high advisory

IBM API Connect: Cross-tenant sensitive information disclosure (CVE-2026-16854)

IBM API Connect versions 12.1.0.0 through 12.1.1.2 contain an injection vulnerability that may allow a remote authenticated attacker to obtain sensitive information belonging to other tenants.

IBM API Connect 12.1.0.0 through 12.1.1.2
1c
critical advisory

IBM API Connect: Remote code execution via path traversal (CVE-2026-17239)

IBM API Connect versions 12.1.0.0 through 12.1.1.2 contain a path traversal vulnerability that could allow a remote authenticated attacker to execute arbitrary code.

IBM API Connect 12.1.0.0 through 12.1.1.2
1c