CVE-2026-17360: Multiple Vulnerabilities in IBM API Connect

Q: Which deployments are affected?

IBM API Connect V12 OnPrem deployments running versions 12.1.0.0 through 12.1.1.2 are affected.

Q: What level of access could an attacker obtain?

A remote attacker could gain full administrative control of the affected IBM API Connect deployment.

Q: Does exploitation require prior access or credentials?

The available information identifies hard-coded credentials as the cause and describes the attacker as remote, but it does not specify any additional prerequisites for exploitation.

Published Nov 5, 2026

Updated

IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to gain full administrative control due to the use of hard-coded credentials.

Other sources

IBM API Connect could allow a remote attacker to gain full administrative control due to the use of hard-coded credentials.

— IBM

Affected Software

1 affected component

IBM API Connect V12 OnPrem<=v12.1.0.0 - v12.1.1.2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade IBM API Connect to a version that resolves this vulnerability.
Fixed in 12.1.1.3

Event History

Nov 5, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

Nov 7, 2026

CVE Published

via MITRE·04:33 AM

Data Sourced

via MITRE·04:33 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·05:18 AM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-7295635

Frequently Asked Questions

Which deployments are affected?

IBM API Connect V12 OnPrem deployments running versions 12.1.0.0 through 12.1.1.2 are affected.

What level of access could an attacker obtain?

A remote attacker could gain full administrative control of the affected IBM API Connect deployment.

Does exploitation require prior access or credentials?

The available information identifies hard-coded credentials as the cause and describes the attacker as remote, but it does not specify any additional prerequisites for exploitation.

CVE-2026-17360: Multiple Vulnerabilities in IBM API Connect

Other sources

Affected Software

Remediation

Event History

Parent advisories

Frequently Asked Questions

Which deployments are affected?

What level of access could an attacker obtain?

Does exploitation require prior access or credentials?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are affected?

What level of access could an attacker obtain?

Does exploitation require prior access or credentials?