CVE-2026-17150

Name of the Vulnerable Software and Affected Versions IBM API Connect versions 10.0.8.0 through 10.0.8.12 IBM API Connect versions 12.1.0.0 through 12.1.1.2

Description Insufficient input validation in the processing of uploaded custom module content allows a remote authenticated attacker to execute arbitrary code. This flaw enables the attacker to gain access to sensitive information belonging to other tenants, as the code can run with privileges extending beyond the user's own tenant.

Recommendations Update IBM API Connect versions 10.0.8.0 through 10.0.8.12 to a patched version. Update IBM API Connect versions 12.1.0.0 through 12.1.1.2 to a patched version.