{"id":"CVE-2026-17301","published":"2026-11-07T05:18:37.913","lastModified":"2026-11-10T16:22:05.343","description":"IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow an unauthenticated attacker to bypass authentication due to improper verification of a cryptographic signature.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-347"],"vendors":["ibm"],"products":["api connect"],"references":[{"url":"https://www.ibm.com/support/pages/node/7295635","tags":["Vendor Advisory"]},{"url":"https://www.ibm.com/support/pages/node/7295637","tags":["Patch","Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The flaw allows unauthenticated attackers to bypass authentication in IBM API Connect by exploiting improper cryptographic signature verification (CWE-347), enabling full compromise of confidentiality, integrity, and availability.","exploitability":"Exploitation is highly likely for remote attackers due to the CVSS vector (AV:N/AC:L/PR:N/UI:N) and lack of authentication requirements.","blast_radius":"Successful exploitation would grant unauthenticated attackers full control over affected API Connect instances, potentially affecting all APIs and tenants managed by the platform.","remediation":"Upgrade to IBM API Connect 10.0.8.13 or later for the 10.0.8.x branch, or to 12.1.1.3 or later for the 12.1.x branch.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["auth-bypass","crypto-flaw","cwe-347","api-gateway","ibm"],"model":"garnet-coder","analyzedAt":"2026-11-07T09:56:34.612Z"}}