Skip to content
OpenAdvisories
Medium · 5.0 CVE-2026-17302 EUVD-2026-118693GHSA-m3x9-mvwf-ch89

Multiple Vulnerabilities in IBM API Connect

Published Nov 7, 2026 · Updated Nov 8, 2026 · Assigned by ibm

Description

IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to probe internal network services due to improper validation of a user-supplied URL.

Affected products

VendorProductAffectedFixed
IBM API Connect 12.1.0.0 – ≤ 12.1.1.2 —

References