High severity8.8NVD Advisory· Published Nov 7, 2026· Updated Nov 7, 2026
CVE-2026-17335
CVE-2026-17335
Description
IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to path traversal. File paths in uploaded content are not sufficiently validated, which could allow files to be written outside the intended location and code to be executed.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: 12.1.0.0 - 12.1.1.2
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.