CVE-2026-17312

IBM API Connect versions 12.1.0.0 through 12.1.1.2 are susceptible to a Cross-Site Request Forgery (CSRF) vulnerability. The underlying cause is that the sign-in flow fails to sufficiently verify that a login response originates from the user's own request. This allows a remote attacker to force ...