{"id":"CVE-2026-17382","published":"2026-11-07T05:18:52.133","lastModified":"2026-11-07T05:18:52.280","description":"IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to a path traversal vulnerability.","cvssScore":8.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N","cwes":["CWE-22"],"vendors":[],"products":[],"references":[{"url":"https://www.ibm.com/support/pages/node/7295635","tags":[]},{"url":"https://www.ibm.com/support/pages/node/7295637","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"IBM API Connect contains a path traversal vulnerability (CWE-22) that allows an authenticated attacker to read sensitive files outside the intended directory by manipulating URL paths. This could lead to exposure of confidential configuration data, credentials, or internal system information.","exploitability":"Exploitation requires valid authentication and low skill, as it leverages standard HTTP path traversal techniques against an unpatched API endpoint.","blast_radius":"Successful exploitation could expose sensitive backend configurations, secrets, or logs stored on the server, potentially enabling further compromise of the API management infrastructure.","remediation":"Upgrade IBM API Connect to version 10.0.8.13 or later for the 10.0.x branch, or to version 12.1.1.3 or later for the 12.1.x branch.","detection":"Defenders should monitor web access logs for requests containing encoded or unencoded path traversal sequences (e.g., '../', '%2e%2e/', '..%2f') in URI paths, especially when combined with authentication headers indicating valid sessions.","tags":["path-traversal","info-disclosure","web","authenticated"],"model":"garnet-coder","analyzedAt":"2026-11-09T09:51:35.773Z"}}