{"id":"CVE-2026-17398","published":"2026-11-07T05:18:55.557","lastModified":"2026-11-11T05:19:43.257","description":"IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.","cvssScore":8.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N","cwes":["CWE-918"],"vendors":[],"products":[],"references":[{"url":"https://www.ibm.com/support/pages/node/7295635","tags":[]},{"url":"https://www.ibm.com/support/pages/node/7295637","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"IBM API Connect contains a server-side request forgery (SSRF) vulnerability in versions 10.0.8.0–10.0.8.12 and 12.1.0.0–12.1.1.2, allowing an authenticated attacker to trick the application into making unintended internal or external HTTP requests, potentially exposing sensitive internal data or services.","exploitability":"Exploitation requires valid authentication credentials and no user interaction; the low attack complexity means a remote attacker with minimal privileges can trigger the SSRF reliably.","blast_radius":"Successful exploitation could lead to unauthorized access to internal systems, metadata services (e.g., cloud instance metadata), or sensitive backend APIs, compromising confidentiality and enabling lateral movement.","remediation":"Upgrade IBM API Connect to version 10.0.8.13 or 12.1.1.3, which contain the fix for CVE-2026-17398.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["ssrf","cwe918","ibm","api-connect","auth-required","info-disclosure"],"model":"garnet-coder","analyzedAt":"2026-11-09T09:52:23.029Z"}}