CVE-2026-17370
EUVD-2026-11875307.11.2026, 05:18
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain an access token for another user due to improper authentication. The sign-in flow does not sufficiently verify the identity of the user completing it, which could allow another user's identity to be assumed.Enginsight
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources
(CNA/ADP records, vendor advisories, Enginsight analysis).
| Vendor | Product | Version | Source |
|---|---|---|---|
| ibm | api_connect | 12.1.0.0 ≤ 𝑥 ≤ 12.1.1.2 | CNA |
| ibm | api_connect | 10.0.8.0 ≤ 𝑥 ≤ 10.0.8.12 | CNA |
Common Weakness Enumeration