Vulnerability Details CVE-2026-17132
IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 50.1%
CVSS Severity
CVSS v3 Score 9.9
Products affected by CVE-2026-17132
-
cpe:2.3:a:ibm:api_connect:12.1.0.0
-
cpe:2.3:a:ibm:api_connect:12.1.1.0