{"id":"CVE-2026-17406","published":"2026-11-07T05:18:57.427","lastModified":"2026-11-07T05:18:57.607","description":"IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery. Address checks can be bypassed, which could allow the server to reach destinations that should be blocked.","cvssScore":8.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N","cwes":["CWE-918"],"vendors":[],"products":[],"references":[{"url":"https://www.ibm.com/support/pages/node/7295635","tags":[]},{"url":"https://www.ibm.com/support/pages/node/7295637","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"IBM API Connect contains a server-side request forgery (SSRF) vulnerability (CWE-918) where address validation can be bypassed by authenticated attackers, allowing the server to make unintended requests to internal or restricted destinations and potentially expose sensitive internal data.","exploitability":"Exploitation requires valid authentication credentials and knowledge of vulnerable endpoints that accept user-controlled URLs for backend requests; no public exploit code is available.","blast_radius":"Successful exploitation could lead to unauthorized access to internal services, metadata endpoints, or cloud provider APIs (e.g., AWS IMDS), resulting in data exfiltration or further lateral movement within the infrastructure.","remediation":"Upgrade IBM API Connect to version 10.0.8.13 or 12.1.1.3 or later, as these versions include patches for the SSRF vulnerability.","detection":"Defenders should monitor for anomalous outbound HTTP/HTTPS requests from API Connect gateway or management nodes to internal IP ranges (e.g., 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16), localhost (127.0.0.0/8), or cloud metadata endpoints (e.g., 169.254.169.254) in logs generated by the gateway or proxy components.","tags":["ssrf","auth-bypass","information-disclosure","web-api","cloud-metadata"],"model":"garnet-coder","analyzedAt":"2026-11-09T09:52:42.635Z"}}