Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-17301 EUVD-2026-118692GHSA-rvrx-qq88-4xr6

Multiple Vulnerabilities in IBM API Connect

Published Nov 7, 2026 · Updated Nov 13, 2026 · Assigned by ibm

Description

IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow an unauthenticated attacker to bypass authentication due to improper verification of a cryptographic signature.

Affected products

VendorProductAffectedFixed
IBM API Connect 12.1.0.0 – ≤ 12.1.1.2, 10.0.8.0 – ≤ 10.0.8.12 —

References