CVE-2026-17399
Awaiting Analysis
Awaiting Analysis - Queue
IBM API Connect Remote Code Execution via Uploaded Content
Vulnerability report for CVE-2026-17399, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-11-07
Last updated on: 2026-11-07
Assigner: IBM Corporation
Description
Description
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to insufficient validation of uploaded content. Content uploaded to the product is not sufficiently checked before it is processed, which could allow code to run on the server.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| IBM | API Connect | From 12.1.0.0 (inc) to 12.1.1.2 (inc) |
| IBM | API Connect | From 10.0.8.0 (inc) to 10.0.8.12 (inc) |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-434 | The product allows the upload or transfer of dangerous file types that are automatically processed within its environment. |
