Vulnerability Details CVE-2026-16716
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to bypass security restrictions to access and modify sensitive information due to improper restriction of security token assignment.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 46.9%
CVSS Severity
CVSS v3 Score 8.8
References
Products affected by CVE-2026-16716
-
cpe:2.3:a:ibm:api_connect:10.0.8.0
-
cpe:2.3:a:ibm:api_connect:10.0.8.10
-
cpe:2.3:a:ibm:api_connect:10.0.8.5