Critical · 9.9 CVE-2026-17354 EUVD-2026-118739GHSA-p4r8-gxqw-rrh7

Multiple Vulnerabilities in IBM API Connect

Published Nov 7, 2026 · Updated Nov 9, 2026 · Assigned by ibm

Description

IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to perform arbitrary file writes due to path traversal.

Vendor	Product	Affected	Fixed
IBM	API Connect	12.1.0.0 – ≤ 12.1.1.2	—