{"id":"CVE-2026-17297","published":"2026-11-07T05:18:37.333","lastModified":"2026-11-10T16:22:50.373","description":"IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to perform an account takeover due to an open redirect vulnerability. The redirect address used during sign-in is not sufficiently validated, which could allow authentication results to be sent to an attacker-controlled location.","cvssScore":9.6,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cwes":["CWE-601"],"vendors":["ibm"],"products":["api connect"],"references":[{"url":"https://www.ibm.com/support/pages/node/7295635","tags":["Vendor Advisory"]},{"url":"https://www.ibm.com/support/pages/node/7295637","tags":["Patch","Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"IBM API Connect contains an open redirect vulnerability in its sign-in flow: user-supplied redirect URLs are not properly validated, allowing an attacker to trick users into completing authentication on a malicious site and stealing their session tokens or credentials.","exploitability":"Exploitation requires social engineering (e.g., phishing) to诱导 the victim to click a crafted link, as the vulnerability is triggered only when a user manually initiates the redirect during authentication.","blast_radius":"Successful exploitation enables full account takeover of any affected IBM API Connect user, potentially compromising sensitive API management data and administrative controls.","remediation":"Upgrade to IBM API Connect 10.0.8.13 or later, or 12.1.1.3 or later, as these versions include the vendor’s fix for the open redirect flaw.","detection":"Defenders should monitor authentication logs for unexpected redirects to external domains during sign-in flows—specifically, look for HTTP 302 responses with Location headers pointing to domains outside the organization’s trusted domain list. No reliable host or network indicator is derivable from the published description.","tags":["open-redirect","auth-bypass","account-takeover","web","ibm"],"model":"garnet-coder","analyzedAt":"2026-11-07T09:58:45.867Z"}}