{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/tags/cve-2026-17117/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ibm:api_connect:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.9,"id":"CVE-2026-17117"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["API Connect (10.0.8.0-10.0.8.12, 12.1.0.0-12.1.1.2)"],"_cs_severities":["critical"],"_cs_tags":["cve-2026-17117","rce","ibm"],"_cs_type":"advisory","_cs_vendors":["IBM"],"content_html":"\u003cp\u003eCVE-2026-17117 is a vulnerability in IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2. The flaw allows an authenticated remote user to manipulate object attributes that are intended to be restricted to system use. Successful exploitation enables the execution of arbitrary code within the context of the affected application.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows for remote code execution by authenticated users, potentially leading to full system compromise of the API Connect instance.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInventory IBM API Connect instances to identify versions within the 10.0.8.0-10.0.8.12 and 12.1.0.0-12.1.1.2 ranges.\u003c/li\u003e\n\u003cli\u003eReview IBM security bulletins for the release of fixed firmware or software updates and prioritize patching of internet-facing instances.\u003c/li\u003e\n\u003cli\u003eMonitor authentication logs for suspicious administrative activity or unauthorized API call patterns targeting object configuration endpoints.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-07T05:50:12Z","date_published":"2026-11-07T05:50:12Z","id":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-rce/","summary":"An improper control of object attributes in IBM API Connect allows a remote authenticated attacker to modify system-reserved fields, leading to arbitrary code execution.","title":"IBM API Connect: Remote code execution via object attribute modification (CVE-2026-17117)","url":"https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-rce/"}],"language":"en","title":"CraftedSignal Threat Feed - Cve-2026-17117","version":"https://jsonfeed.org/version/1.1"}