CVE-2026-17336

Summary

IBM API Connect versions 12.1.0.0 through 12.1.1.2 contain a SQL injection vulnerability (CWE-89) due to improper neutralization of special characters in SQL commands, allowing an authenticated remote attacker to execute arbitrary SQL queries.

Exploitability

Exploitation requires valid authentication credentials and knowledge of vulnerable input fields that feed into unsanitized SQL queries; no public exploit code is available.

Blast radius

Successful exploitation could lead to full compromise of the underlying database, including unauthorized access, modification, or deletion of sensitive data, and potential lateral movement within connected systems.

Detection

Defenders should monitor for anomalous SQL query patterns in database logs—such as presence of SQL metacharacters (e.g., `'`, `--`, `UNION`, `OR 1=1`) in user-supplied input fields logged by API Connect’s gateway or management components. If no such logging is enabled, no reliable indicator is derivable.

Prioritized remediation

Upgrade to IBM API Connect 12.1.1.3 or later, as this version resolves the SQL injection flaw per vendor advisory.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.