CRITICALCVSS v3.1 9.9Vulnerability
CVE-2026-17150
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code and access sensitive information from other tenants due to insufficient input validation. Uploaded custom module content is not sufficiently validated before it is processed, which could allow code to run with access beyond the user's own tenant.
Properties
- Severity
- CRITICAL
- Nvd fetched at
- 2026-11-07T06:40:34.987550+00:00
- Cvss score
- 9.9
- Cvss severity
- CRITICAL
- Retrieved at
- 2026-11-07T06:41:39+00:00
- Score
- 9.9
- Last source
- NVD
- Cvss version
- 3.1
- Cve id
- CVE-2026-17150
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- First seen by Signal
- 2026-11-07T06:41:39+00:00
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- Published at
- 2026-11-07T05:18:28.230
- Last modified
- 2026-11-07T05:18:28.390
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph