HIGHCVSS v3.1 8.8Vulnerability
CVE-2026-17335
IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to path traversal. File paths in uploaded content are not sufficiently validated, which could allow files to be written outside the intended location and code to be executed.
Properties
- Severity
- HIGH
- Nvd fetched at
- 2026-11-07T06:40:34.987550+00:00
- Cvss severity
- HIGH
- Cvss score
- 8.8
- Retrieved at
- 2026-11-07T06:41:39+00:00
- Score
- 8.8
- Cvss version
- 3.1
- Last source
- NVD
- Cve id
- CVE-2026-17335
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- First seen by Signal
- 2026-11-07T06:41:39+00:00
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Published at
- 2026-11-07T05:18:44.453
- Last modified
- 2026-11-07T05:18:44.620
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph