CVE-2026-17190

IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 are susceptible to a cross-site scripting (XSS) vulnerability. The root cause is that HTML content provided by a provider is not sufficiently sanitized before being displayed. This could allow a remote authenticated...