{"id":"CVE-2026-17188","published":"2026-11-07T05:18:29.640","lastModified":"2026-11-10T17:17:32.633","description":"IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery. When service definitions are imported, references to external resources are not sufficiently restricted, so the server could be made to request resources it should not access.","cvssScore":8.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N","cwes":["CWE-918"],"vendors":["ibm"],"products":["api connect"],"references":[{"url":"https://www.ibm.com/support/pages/node/7295635","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"IBM API Connect versions 12.1.0.0 through 12.1.1.2 contain a server-side request forgery (SSRF) vulnerability in the service definition import functionality. An authenticated attacker can exploit this to force the server to make unintended requests to internal or external resources, potentially exposing sensitive internal data or services.","exploitability":"Exploitation requires valid authentication and the ability to import service definitions that reference external URLs; no public exploit code is available, but the attack is straightforward for a privileged insider.","blast_radius":"Successful exploitation could lead to exposure of internal network resources, credentials, or metadata stored on internal services accessible to the API Connect server, and limited integrity impact via potential manipulation of imported definitions.","remediation":"Upgrade to IBM API Connect 12.1.1.3 or later, which includes fixes for this SSRF vulnerability (CVE-2026-17188).","detection":"No reliable host or network indicator is derivable from the published description.","tags":["ssrf","cwe918","ibm","api-connect","auth-required"],"model":"garnet-coder","analyzedAt":"2026-11-09T09:48:59.990Z"}}