Security alerts

2,031 alerts · page 10 of 102

1. Critical (CVSS 9+) Published 2026-11-07 06:34 · updated 2026-11-09 06:55

   CVE-2026-17399 Multiple Vulnerabilities in IBM API Connect

   Critical·CVSS 9.9

   Exploit status: No public exploit known

   Affects: ibm api connect

   IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to insufficient validation of uploaded content. Content uploaded to the product is not sufficiently checked before it is processed, w...

2. Critical (CVSS 9+) Published 2026-11-07 06:34

   CVE-2026-17396 Multiple Vulnerabilities in IBM API Connect

   Critical·CVSS 9.6

   Exploit status: No public exploit known

   Affects: ibm api connect

   IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to SQL injection.

3. Critical (CVSS 9+) Published 2026-11-07 06:34 · updated 2026-11-09 15:33

   CVE-2026-17394 Multiple Vulnerabilities in IBM API Connect

   Critical·CVSS 9.6

   Exploit status: No public exploit known

   Affects: ibm api connect

   IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to improperly controlled modification of object attributes. A user-supplied value could change an access-related setting that s...

4. Critical (CVSS 9+) Published 2026-11-07 06:34 · updated 2026-11-10 06:56

   CVE-2026-17392 Multiple Vulnerabilities in IBM API Connect

   Critical·CVSS 9.9

   Exploit status: No public exploit known

   Affects: ibm api connect

   IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to gain unauthorized administrative access to other tenants due to LDAP injection. User-supplied input is not properly neutralized in directory queries, which coul...

5. Critical (CVSS 9+) Published 2026-11-07 06:33

   CVE-2026-17360 Multiple Vulnerabilities in IBM API Connect

   Critical·CVSS 9.8

   Exploit status: No public exploit known

   Affects: ibm api connect

   IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to gain full administrative control due to the use of hard-coded credentials.

6. Critical (CVSS 9+) Published 2026-11-07 06:33 · updated 2026-11-09 06:55

   CVE-2026-17359 Multiple Vulnerabilities in IBM API Connect

   Critical·CVSS 9.9

   Exploit status: No public exploit known

   Affects: ibm api connect

   IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of generation of code. A user-supplied value can influence code that the product generates, which could lead to c...

7. Critical (CVSS 9+) Published 2026-11-07 06:33 · updated 2026-11-09 16:28

   CVE-2026-17354 Multiple Vulnerabilities in IBM API Connect

   Critical·CVSS 9.9

   Exploit status: No public exploit known

   Affects: ibm api connect

   IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to perform arbitrary file writes due to path traversal.

8. Critical (CVSS 9+) Published 2026-11-07 06:33

   CVE-2026-17353 Multiple Vulnerabilities in IBM API Connect

   Critical·CVSS 9.6

   Exploit status: No public exploit known

   Affects: ibm api connect

   IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information and bypass security restrictions due to server-side request forgery.

9. Critical (CVSS 9+) Published 2026-11-07 06:33

   CVE-2026-17344 Multiple Vulnerabilities in IBM API Connect

   Critical·CVSS 9.3

   Exploit status: No public exploit known

   Affects: ibm api connect

   IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to server-side request forgery. A service that can be reached without authentication could be made to send requests to unintended destinations.

10. Critical (CVSS 9+) Published 2026-11-07 06:33 · updated 2026-11-09 06:55

    CVE-2026-17342 Multiple Vulnerabilities in IBM API Connect

    Critical·CVSS 9.9

    Exploit status: No public exploit known

    Affects: ibm api connect

    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of generation of code.

11. Critical (CVSS 9+) Published 2026-11-07 06:33 · updated 2026-11-09 17:10

    CVE-2026-17340 Multiple Vulnerabilities in IBM API Connect

    Critical·CVSS 9.8

    Exploit status: No public exploit known

    Affects: ibm api connect

    IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute arbitrary code due to a path traversal vulnerability.

12. Critical (CVSS 9+) Published 2026-11-07 06:33 · updated 2026-11-10 21:21

    CVE-2026-17339 Multiple Vulnerabilities in IBM API Connect

    Critical·CVSS 9.1

    Exploit status: No public exploit known

    Affects: ibm api connect

    IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to access or delete resources belonging to other tenants due to path traversal.

13. Critical (CVSS 9+) Published 2026-11-07 06:33 · updated 2026-11-09 15:35

    CVE-2026-17338 Multiple Vulnerabilities in IBM API Connect

    Critical·CVSS 9.1

    Exploit status: No public exploit known

    Affects: ibm api connect

    IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to broken object-level authorization.

14. Critical (CVSS 9+) Published 2026-11-07 06:33 · updated 2026-11-10 21:11

    CVE-2026-17336 Multiple Vulnerabilities in IBM API Connect

    Critical·CVSS 9.9

    Exploit status: No public exploit known

    Affects: ibm api connect

    IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command.

15. Critical (CVSS 9+) Published 2026-11-07 06:33

    CVE-2026-17329 Multiple Vulnerabilities in IBM API Connect

    Critical·CVSS 9.3

    Exploit status: No public exploit known

    Affects: ibm api connect

    IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to improper validation of endpoint URLs.

16. Critical (CVSS 9+) Published 2026-11-07 06:33 · updated 2026-11-09 15:36

    CVE-2026-17313 Multiple Vulnerabilities in IBM API Connect

    Critical·CVSS 9.8

    Exploit status: No public exploit known

    Affects: ibm api connect

    IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information and take control of gateway configuration due to authentication bypass via an alternate path.

17. Critical (CVSS 9+) Published 2026-11-07 06:32

    CVE-2026-17301 Multiple Vulnerabilities in IBM API Connect

    Critical·CVSS 9.8

    Exploit status: No public exploit known

    Affects: ibm api connect

    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow an unauthenticated attacker to bypass authentication due to improper verification of a cryptographic signature.

18. Critical (CVSS 9+) Published 2026-11-07 06:32

    CVE-2026-17299 Multiple Vulnerabilities in IBM API Connect

    Critical·CVSS 9.6

    Exploit status: No public exploit known

    Affects: ibm api connect

    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to perform arbitrary file reads and server-side request forgery due to unrestricted resolution of external references. Externally referenced content in submitted d...

19. Critical (CVSS 9+) Published 2026-11-07 06:32

    CVE-2026-17298 Multiple Vulnerabilities in IBM API Connect

    Critical·CVSS 9.9

    Exploit status: No public exploit known

    Affects: ibm api connect

    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.

20. Critical (CVSS 9+) Published 2026-11-07 06:32 · updated 2026-11-09 15:37

    CVE-2026-17297 Multiple Vulnerabilities in IBM API Connect

    Critical·CVSS 9.6

    Exploit status: No public exploit known

    Affects: ibm api connect

    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to perform an account takeover due to an open redirect vulnerability. The redirect address used during sign-in is not sufficiently validated, which could allow authentication re...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS and public exploit-reference metadata. A proof-of-concept means public code exists; it is not evidence of exploitation. "Exploited in the wild" means confirmed exploitation (e.g. a CISA KEV listing).