High · 8.5 CVE-2026-17617 EUVD-2026-53450GHSA-g8h4-jvg2-r37q

Server-Side Request Forgery (SSRF) in IBM Application Gateway Operator

Published Aug 5, 2026 · Updated Aug 5, 2026 · Assigned by ibm

Vendor: IBM Product: Application Gateway Operator

Description

IBM Application Gateway Operator 22.2 through 26.06 is vulnerable to Server-Side Request Forgery (SSRF) due to insufficient validation of URLs specified in custom resources.

Affected products

Vendor	Product	Affected	Fixed
IBM	Application Gateway Operator	22.2.0 – ≤ 26.06	—

References

https://www.ibm.com/support/pages/node/7282296 vendor-advisory patch