Vulnerability Details CVE-2026-17131
IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to server-side request forgery. Restrictions on outbound requests can be bypassed, so the server could be made to contact unintended destinations and return the response.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 38.8%
CVSS Severity
CVSS v3 Score 9.3
Products affected by CVE-2026-17131
-
cpe:2.3:a:ibm:api_connect:12.1.0.0
-
cpe:2.3:a:ibm:api_connect:12.1.1.0