CVE-2026-17340

Name of the Vulnerable Software and Affected Versions IBM API Connect versions 12.1.0.0 through 12.1.1.2

Description A path traversal flaw allows a remote attacker to execute arbitrary code without requiring authentication. Path traversal is a technique used to access files and directories that are stored outside the web root folder by manipulating variables that reference files with dot-dot-slash (../) sequences.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.