CVE-2026-17399

Name of the Vulnerable Software and Affected Versions IBM API Connect versions 10.0.8.0 through 10.0.8.12 IBM API Connect versions 12.1.0.0 through 12.1.1.2

Description Remote authenticated attackers can execute arbitrary code on the server due to insufficient validation of uploaded content. The system fails to sufficiently check content before processing it, leading to remote code execution (RCE), which is the ability of an attacker to execute malicious commands on a remote machine.

Recommendations Update IBM API Connect versions 10.0.8.0 through 10.0.8.12 to a patched version. Update IBM API Connect versions 12.1.0.0 through 12.1.1.2 to a patched version.