CVE-2026-17147

Name of the Vulnerable Software and Affected Versions IBM API Connect versions 10.0.8.0 through 10.0.8.12 IBM API Connect versions 12.1.0.0 through 12.1.1.2

Description A path traversal issue allows a remote authenticated attacker to execute arbitrary code and perform unauthorized administrative actions on the servers. Path traversal is a flaw that allows an attacker to access files and directories that are stored outside the web root folder.

Recommendations Update IBM API Connect versions 10.0.8.0 through 10.0.8.12 to a newer version. Update IBM API Connect versions 12.1.0.0 through 12.1.1.2 to a newer version. Review user privileges to limit potential impact.