EUVD-2026-118788

IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements in an OS command...

CVE-2026-17401 Multiple Vulnerabilities in IBM API Connect

IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow...

EUVD-2026-118781

IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow...

CVE-2026-17401

IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 are susceptible to a stack-based buffer overflow . This vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution . No specific exploit details or remediation steps are provided i...

CVE-2026-17399

The IBM API Connect products, specifically versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 , are vulnerable to arbitrary code execution . The root cause is insufficient validation of uploaded content , where content is not sufficiently checked before processing, allowing an atta...

EUVD-2026-118779

IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to insufficient validation of uploaded content. Content uploaded to the product is not sufficiently checked before it is processed, which could allow...

CVE-2026-17399 Multiple Vulnerabilities in IBM API Connect

IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to insufficient validation of uploaded content. Content uploaded to the product is not sufficiently checked before it is processed, which could allow...

EUVD-2026-118744

IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of generation of code. A user-supplied value can influence code that the product generates, which could lead to code execution...

CVE-2026-17359

IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 are affected by multiple vulnerabilities that allow a remote authenticated attacker to achieve arbitrary code execution . The root cause is identified as improper control of generation of code , where a user-supplie...

CVE-2026-17359 Multiple Vulnerabilities in IBM API Connect

IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of generation of code. A user-supplied value can influence code that the product generates, which could lead to code execution...

CVE-2022-36446-Webmin-RCE

CVE-2022-36446 — Webmin 1.997 RCE Authenticated Exploit for the Remote Code Execution vulnerability in Webmin versions prior to 1.997, through the Software Package Updates module. How does it work? The Webmin Software Package Updates module does not properly sanitize the u parameter before passin...

EUVD-2026-118733

IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of generation of code...

CVE-2026-17342

IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 are affected by multiple vulnerabilities that could allow a remote authenticated attacker to execute arbitrary code . The root cause is identified as improper control of generation of code (CWE-94). The impact is cl...

CVE-2026-17342 Multiple Vulnerabilities in IBM API Connect

IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of generation of code...

CVE-2026-17340

IBM API Connect versions 12.1.0.0 through 12.1.1.2 are affected by a path traversal vulnerability. This flaw could allow a remote attacker to execute arbitrary code . The vulnerability is associated with CWE-22: Improper Limitation of a Pathname to a Restricted Directory and carries a CRITICAL ba...

CVE-2026-17340 Multiple Vulnerabilities in IBM API Connect

IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute arbitrary code due to a path traversal vulnerability...

EUVD-2026-118731

IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute arbitrary code due to a path traversal vulnerability...

CVE-2026-17335 Multiple Vulnerabilities in IBM API Connect

IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to path traversal. File paths in uploaded content are not sufficiently validated, which could allow files to be written outside the intended location and code to be executed...

CVE-2026-17335

IBM API Connect versions 12.1.0.0 through 12.1.1.2 are vulnerable to arbitrary code execution via a path traversal flaw. The root cause is the insufficient validation of file paths within uploaded content, which can allow an attacker to write files outside the intended directory. A remote authent...

EUVD-2026-118726

IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to path traversal. File paths in uploaded content are not sufficiently validated, which could allow files to be written outside the intended location and code to be executed...