Skip to content
OpenAdvisories
Critical · 9.1 CVE-2026-17338 EUVD-2026-118729GHSA-6g4w-42xc-pv22

Multiple Vulnerabilities in IBM API Connect

Published Nov 7, 2026 · Updated Nov 9, 2026 · Assigned by ibm

Description

IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to broken object-level authorization.

Affected products

VendorProductAffectedFixed
IBM API Connect 12.1.0.0 – ≤ 12.1.1.2 —

References