{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/ibm-api-connect-12.1.0.0-through-12.1.1.2-12.1.0.0-12.1.1.2/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":7.7,"id":"CVE-2026-16854"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["IBM API Connect 12.1.0.0 through 12.1.1.2 (12.1.0.0-12.1.1.2)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":[],"content_html":"","date_modified":"2026-11-07T06:01:20Z","date_published":"2026-11-07T06:01:20Z","id":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-injection/","summary":"IBM API Connect versions 12.1.0.0 through 12.1.1.2 contain an injection vulnerability that may allow a remote authenticated attacker to obtain sensitive information belonging to other tenants.","title":"IBM API Connect: Cross-tenant sensitive information disclosure (CVE-2026-16854)","url":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-injection/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ibm:api_connect_12_1_0_0_through_12_1_1_2:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.9,"id":"CVE-2026-17239"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["IBM API Connect 12.1.0.0 through 12.1.1.2 (12.1.0.0-12.1.1.2)"],"_cs_severities":["critical"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["IBM"],"content_html":"\u003cp\u003eIBM API Connect versions 12.1.0.0 through 12.1.1.2 are susceptible to a path traversal vulnerability. This flaw may allow a remote authenticated attacker to execute arbitrary code. The CVSS v3.1 base score for this vulnerability is 9.9.\u003c/p\u003e\n","date_modified":"2026-11-07T05:51:08Z","date_published":"2026-11-07T05:51:08Z","id":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-rce-02d7bdc6/","summary":"IBM API Connect versions 12.1.0.0 through 12.1.1.2 contain a path traversal vulnerability that could allow a remote authenticated attacker to execute arbitrary code.","title":"IBM API Connect: Remote code execution via path traversal (CVE-2026-17239)","url":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-rce-02d7bdc6/"}],"language":"en","title":"CraftedSignal Threat Feed - IBM API Connect 12.1.0.0 Through 12.1.1.2 (12.1.0.0-12.1.1.2)","version":"https://jsonfeed.org/version/1.1"}