Cve-2026-17117 - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/tags/cve-2026-17117/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioSat, 07 Nov 2026 05:50:12 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgIBM API Connect: Remote code execution via object attribute modification (CVE-2026-17117)https://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-rce/Sat, 07 Nov 2026 05:50:12 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-ibm-api-connect-rce/An improper control of object attributes in IBM API Connect allows a remote authenticated attacker to modify system-reserved fields, leading to arbitrary code execution.CVE-2026-17117 is a vulnerability in IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2. The flaw allows an authenticated remote user to manipulate object attributes that are intended to be restricted to system use. Successful exploitation enables the execution of arbitrary code within the context of the affected application.

Impact

Successful exploitation allows for remote code execution by authenticated users, potentially leading to full system compromise of the API Connect instance.

Recommendation

  • Inventory IBM API Connect instances to identify versions within the 10.0.8.0-10.0.8.12 and 12.1.0.0-12.1.1.2 ranges.
  • Review IBM security bulletins for the release of fixed firmware or software updates and prioritize patching of internet-facing instances.
  • Monitor authentication logs for suspicious administrative activity or unauthorized API call patterns targeting object configuration endpoints.
]]>criticaladvisorycve-2026-17117rceibm