CVE WATCH / VULNERABILITY DETAIL
CVE-2026-17278
CRITICALCVSS 9.8NVD feed
Published 7 November 2026 · tracked since 8 November 2026
Description
IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to gain unauthorized access to sensitive API catalog and runtime configuration data due to improper authentication. Information supplied by the client is not sufficiently verified, which could allow a caller to appear as a trust
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-17167 MEDIUM 4.3
- CVE-2026-120043 HIGH 7.5
- CVE-2026-119167 HIGH 7.2
- CVE-2026-110534 MEDIUM 6.4
- CVE-2026-19803 CRITICAL 9.8
- CVE-2026-121516 MEDIUM 6.1
- CVE-2026-120739 HIGH 7.2
- CVE-2026-120677 HIGH 7.2
- CVE-2026-120560 MEDIUM 6.5
- CVE-2026-119158 HIGH 7.2