IBM API Connect 12.1.0.0 Through 12.1.1.2 (12.1.0.0-12.1.1.2) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/ibm-api-connect-12.1.0.0-through-12.1.1.2-12.1.0.0-12.1.1.2/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioSat, 07 Nov 2026 06:01:20 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgIBM API Connect: Cross-tenant sensitive information disclosure (CVE-2026-16854)https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-injection/Sat, 07 Nov 2026 06:01:20 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-injection/IBM API Connect versions 12.1.0.0 through 12.1.1.2 contain an injection vulnerability that may allow a remote authenticated attacker to obtain sensitive information belonging to other tenants.highadvisoryIBM API Connect: Remote code execution via path traversal (CVE-2026-17239)https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-rce-02d7bdc6/Sat, 07 Nov 2026 05:51:08 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-rce-02d7bdc6/IBM API Connect versions 12.1.0.0 through 12.1.1.2 contain a path traversal vulnerability that could allow a remote authenticated attacker to execute arbitrary code.<p>IBM API Connect versions 12.1.0.0 through 12.1.1.2 are susceptible to a path traversal vulnerability. This flaw may allow a remote authenticated attacker to execute arbitrary code. The CVSS v3.1 base score for this vulnerability is 9.9.</p> criticaladvisory