CVE-2026-17379
7.4 HIGHPublished 2026-11-07 · Updated 2026-11-07
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to bypass authentication and assign arbitrary roles due to improper verification of cryptographic signatures.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Weaknesses
CWE-347
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- UNSCOREDCVE-2025-0008
- MEDIUMCVE-2025-71422PoC
- HIGHCVE-2026-100293
- CRITICALCVE-2026-10141
- HIGHCVE-2026-102266PoC
- CRITICALCVE-2026-102268PoC
- HIGHCVE-2026-102271PoC
- HIGHCVE-2026-102272PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.