CVE-2026-17150

IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code and access sensitive information from other tenants due to insufficient input validation. Uploaded custom module content is not sufficiently validated...

CVE-2026-17150

IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 are vulnerable to multiple issues resulting from insufficient input validation . Specifically, the software fails to sufficiently validate uploaded custom module content before processing. This flaw could allow a re...