CVE-2026-17188

Summary

IBM API Connect versions 12.1.0.0 through 12.1.1.2 contain a server-side request forgery (SSRF) vulnerability in the service definition import functionality. An authenticated attacker can exploit this to force the server to make unintended requests to internal or external resources, potentially exposing sensitive internal data or services.

Exploitability

Exploitation requires valid authentication and the ability to import service definitions that reference external URLs; no public exploit code is available, but the attack is straightforward for a privileged insider.

Blast radius

Successful exploitation could lead to exposure of internal network resources, credentials, or metadata stored on internal services accessible to the API Connect server, and limited integrity impact via potential manipulation of imported definitions.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to IBM API Connect 12.1.1.3 or later, which includes fixes for this SSRF vulnerability (CVE-2026-17188).

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.