CVE-2026-17617: Server-Side Request Forgery (SSRF) in IBM Application Gateway Operator

Q: What is the severity of CVE-2026-17617?

The severity of CVE-2026-17617 is high, with a score of 8.5.

Q: What does CVE-2026-17617 affect?

CVE-2026-17617 affects the IBM Application Gateway Operator versions 22.2 through 26.06.

Q: What type of vulnerability is CVE-2026-17617?

CVE-2026-17617 is classified as a Server-Side Request Forgery (SSRF) vulnerability.

Q: How do I fix CVE-2026-17617?

To fix CVE-2026-17617, ensure that proper validation for URLs in custom resources is implemented.

Q: What are the risks associated with CVE-2026-17617?

CVE-2026-17617 can allow an attacker to send unauthorized requests to internal services, potentially leading to data exposure.

Published Aug 5, 2026

Updated

IBM Application Gateway Operator 22.2 through 26.06 is vulnerable to Server-Side Request Forgery (SSRF) due to insufficient validation of URLs specified in custom resources.

Affected Software

1 affected component

IBM IBM Application Gateway Operator>=22.2<=26.06

Event History

Aug 5, 2026

CVE Published

via MITRE·04:18 PM

Data Sourced

via MITRE·04:18 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2026-17617?

The severity of CVE-2026-17617 is high, with a score of 8.5.

What does CVE-2026-17617 affect?

CVE-2026-17617 affects the IBM Application Gateway Operator versions 22.2 through 26.06.

What type of vulnerability is CVE-2026-17617?

CVE-2026-17617 is classified as a Server-Side Request Forgery (SSRF) vulnerability.

How do I fix CVE-2026-17617?

To fix CVE-2026-17617, ensure that proper validation for URLs in custom resources is implemented.

What are the risks associated with CVE-2026-17617?

CVE-2026-17617 can allow an attacker to send unauthorized requests to internal services, potentially leading to data exposure.

CVE-2026-17617: Server-Side Request Forgery (SSRF) in IBM Application Gateway Operator

Affected Software

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2026-17617?

What does CVE-2026-17617 affect?

What type of vulnerability is CVE-2026-17617?

How do I fix CVE-2026-17617?

What are the risks associated with CVE-2026-17617?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2026-17617?

What does CVE-2026-17617 affect?

What type of vulnerability is CVE-2026-17617?

How do I fix CVE-2026-17617?

What are the risks associated with CVE-2026-17617?