{"id":"CVE-2026-17328","published":"2026-11-07T05:18:43.083","lastModified":"2026-11-09T14:17:18.957","description":"IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to improper input validation. Input checks are incomplete, which could allow them to be bypassed.","cvssScore":8.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N","cwes":["CWE-918"],"vendors":[],"products":[],"references":[{"url":"https://www.ibm.com/support/pages/node/7295635","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"IBM API Connect versions 12.1.0.0 through 12.1.1.2 contain an incomplete input validation flaw (CWE-918) that allows an authenticated attacker to bypass security checks and access sensitive information remotely. This is a server-side request forgery (SSRF)-like vulnerability where improper sanitization enables data leakage.","exploitability":"Exploitation requires valid authentication credentials and knowledge of vulnerable endpoints, with moderate difficulty due to incomplete input validation that may be bypassed via obfuscation or edge cases.","blast_radius":"Successful exploitation could expose internal system details, configuration data, or backend service responses, potentially enabling further compromise of the API gateway or connected services.","remediation":"Upgrade to IBM API Connect 12.1.1.3 or later, which contains fixes for this input validation issue.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["ssrf","auth-bypass","info-disclosure","web","api"],"model":"garnet-coder","analyzedAt":"2026-11-09T09:50:31.488Z"}}