CVE-2026-17411: Multiple Vulnerabilities in IBM API Connect
Published Nov 5, 2026
·Updated
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow an authenticated attacker to view, add, modify, or delete information in the back-end database due to SQL injection. Input is not properly neutralized before it is used in database queries.
Other sources
IBM API Connect could allow an authenticated attacker to view, add, modify, or delete information in the back-end database due to SQL injection. Input is not properly neutralized before it is used in database queries.
— IBM
Affected Software
1 affected component
IBM API Connect<=V10.0.8.0 - V10.0.8.12
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM API Connectto a version that resolves this vulnerability.Fixed in 10.0.8.13 - Upgrade
Upgrade
IBM API Connectto a version that resolves this vulnerability.Fixed in 12.1.1.3
Event History
Nov 5, 2026
CVE Published
via IBM·12:00 AM
Data Sourced
via IBM·12:00 AM
DescriptionAffected Software
Nov 7, 2026
CVE Published
via MITRE·04:34 AM
Data Sourced
via MITRE·04:34 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·05:18 AM
DescriptionSeverityWeakness