{"id":"CVE-2026-18836","published":"2026-11-07T05:18:59.597","lastModified":"2026-11-09T14:17:21.207","description":"IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to server-side request forgery. The affected component can be made to send requests to unintended destinations and return the response to the attacker.","cvssScore":9.3,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:N","cwes":["CWE-918"],"vendors":[],"products":[],"references":[{"url":"https://www.ibm.com/support/pages/node/7295635","tags":[]},{"url":"https://www.ibm.com/support/pages/node/7295637","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"IBM API Connect contains a server-side request forgery (SSRF) vulnerability in versions 10.0.8.0–10.0.8.12 and 12.1.0.0–12.1.1.2, allowing unauthenticated remote attackers to force the server to make unintended HTTP requests to internal or external systems and exfiltrate responses containing sensitive information.","exploitability":"Exploitation is straightforward for remote attackers with network access to the vulnerable API Connect gateway, requiring only manipulation of user-controlled input that influences backend request destinations.","blast_radius":"Successful exploitation could expose internal service endpoints, credentials, or metadata stored in responses, potentially enabling lateral movement or further compromise of connected systems.","remediation":"Upgrade IBM API Connect to version 10.0.8.13 or 12.1.1.3, which contain the vendor-provided fix for CVE-2026-18836.","detection":"Defenders should monitor gateway access logs for unexpected outbound HTTP requests to internal IP ranges (e.g., 10.x.x.x, 192.168.x.x, 172.16–31.x.x), localhost (127.0.0.1), or metadata services (169.254.169.254); anomalous request destinations not aligned with configured API endpoints may indicate SSRF attempts.","tags":["ssrf","ibm","api-gateway","info-disclosure","web"],"model":"garnet-coder","analyzedAt":"2026-11-07T10:01:50.008Z"}}