CVE-2026-17146

Summary

IBM API Connect versions 10.0.8.0–10.0.8.12 and 12.1.0.0–12.1.1.2 contain a cross-site scripting (XSS) vulnerability due to insufficient input validation, allowing an authenticated attacker to inject malicious JavaScript that executes in the context of other users' sessions and enables theft of sensitive data.

Exploitability

Exploitation requires low skill and a valid authenticated session, but no public exploit code is available.

Blast radius

Successful exploitation could lead to session hijacking, unauthorized data access, or manipulation of API management functions within the IBM API Connect portal.

Detection

Defenders should monitor for anomalous JavaScript execution in browser sessions accessing the API Connect admin portal, such as unexpected DOM modifications or outbound requests to external domains from legitimate user sessions; however, no specific log entries or network artifacts are reliably attributable to this vulnerability per the published description.

Prioritized remediation

Upgrade to IBM API Connect 10.0.8.13 or 12.1.1.3 or later, as these versions contain the fix for CVE-2026-17146.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.