CVE-2026-17287

Summary

IBM API Connect versions 10.0.8.0–10.0.8.12 and 12.1.0.0–12.1.1.2 contain a server-side request forgery (SSRF) vulnerability (CWE-918) where user-supplied addresses are insufficiently validated, allowing an authenticated attacker to force the server to make unintended internal or external network requests and potentially exfiltrate sensitive data from those responses.

Exploitability

Exploitation requires valid authentication and minimal skill, as the vulnerability stems from inadequate input validation rather than complex logic flaws.

Blast radius

An attacker could access internal services, metadata endpoints (e.g., cloud provider IMDS), or other protected resources reachable by the vulnerable server, leading to data leakage or lateral movement.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to IBM API Connect 10.0.8.13 or 12.1.1.3, which contain the vendor-provided fix for CVE-2026-17287.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.