PT-2026-139094

CVE-2026-17342

·

Published

2026-11-07

·

Updated

2026-11-08

Description by

CVSS 3.1
9.9
Critical
MetricsAV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions IBM API Connect versions 10.0.8.0 through 10.0.8.12 IBM API Connect versions 12.1.0.0 through 12.1.1.2
Description Remote authenticated attackers can execute arbitrary code due to improper control of code generation. This allows authenticated users to inject and execute unauthorized commands within the system.
Recommendations Update IBM API Connect versions 10.0.8.0 through 10.0.8.12 to a patched version. Update IBM API Connect versions 12.1.0.0 through 12.1.1.2 to a patched version.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-94: Improper Control of Generation of Code (\'Code Injection\')
Related identifiers
CVE-2026-17342
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com