{"id":"CVE-2026-17239","published":"2026-11-07T05:18:32.657","lastModified":"2026-11-10T16:54:15.890","description":"IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to a path traversal vulnerability.","cvssScore":9.9,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-22"],"vendors":["ibm"],"products":["api connect"],"references":[{"url":"https://www.ibm.com/support/pages/node/7295635","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A path traversal vulnerability in IBM API Connect 12.1.0.0 through 12.1.1.2 allows authenticated remote attackers to escape intended directory boundaries and write or execute arbitrary files on the server, leading to full system compromise.","exploitability":"Exploitation requires valid authentication credentials and knowledge of vulnerable endpoints that process user-controlled paths without proper sanitization.","blast_radius":"Successful exploitation grants an attacker full administrative control over the affected system, enabling data exfiltration, lateral movement, and persistent backdoor installation across connected infrastructure.","remediation":"Upgrade to IBM API Connect 12.1.1.3 or later, which contains the official fix for CVE-2026-17239.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["path-traversal","rce","authenticated","web"],"model":"garnet-coder","analyzedAt":"2026-11-07T09:45:26.198Z"}}