CVE-2026-17385

Summary

IBM API Connect versions 10.0.8.0–10.0.8.12 and 12.1.0.0–12.1.1.2 contain a server-side request forgery (SSRF) vulnerability (CWE-918) that allows an authenticated remote attacker to access internal or external resources via the vulnerable server, potentially exposing sensitive information.

Exploitability

Exploitation requires valid authentication credentials and no user interaction; the low attack complexity makes it feasible for compromised or leaked credentials.

Blast radius

Successful exploitation could lead to unauthorized access to internal services, metadata endpoints (e.g., cloud provider IMDS), or other sensitive backend systems reachable by the API Connect server.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to IBM API Connect 10.0.8.13 or 12.1.1.3 or later, as those versions contain the fix for CVE-2026-17385.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.