{"id":"CVE-2026-17313","published":"2026-11-07T05:18:40.163","lastModified":"2026-11-09T14:17:18.777","description":"IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information and take control of gateway configuration due to authentication bypass via an alternate path.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-288"],"vendors":[],"products":[],"references":[{"url":"https://www.ibm.com/support/pages/node/7295635","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"IBM API Connect versions 12.1.0.0 through 12.1.1.2 contain an authentication bypass vulnerability (CWE-288) that allows unauthenticated remote attackers to access sensitive gateway configuration data and potentially take control of the gateway via an alternate, unprotected path.","exploitability":"Exploitation is highly likely due to the CVSS vector indicating network attack vector (AV:N), low attack complexity (AC:L), no privileges required (PR:N), and no user interaction (UI:N).","blast_radius":"Successful exploitation could lead to full compromise of the API gateway, enabling attackers to intercept, modify, or block API traffic, exfiltrate sensitive configuration data, and potentially pivot into internal systems.","remediation":"Upgrade to IBM API Connect 12.1.2.0 or later, which contains the official fix for this authentication bypass vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["auth-bypass","gateway-compromise","sensitive-data-exposure","remote-exploit","cwe-288"],"model":"garnet-coder","analyzedAt":"2026-11-07T09:56:48.938Z"}}