VYPR
← All advisories
Critical severity9.9NVD Advisory· Published Nov 7, 2026· Updated Nov 7, 2026

CVE-2026-17150

CVE-2026-17150

Description

IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code and access sensitive information from other tenants due to insufficient input validation. Uploaded custom module content is not sufficiently validated before it is processed, which could allow code to run with access beyond the user's own tenant.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

1
  • IBM/API Connectllm-fuzzy
    Range: 10.0.8.0 - 10.0.8.12, 12.1.0.0 - 12.1.1.2

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.