Vulnerability Details CVE-2026-17240
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to bypass security restrictions due to improper authentication. Authentication checks are not applied consistently, which could allow protected resources to be reached without valid credentials.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 48.8%
CVSS Severity
CVSS v3 Score 6.5
References
Products affected by CVE-2026-17240
-
cpe:2.3:a:ibm:api_connect:10.0.8.0
-
cpe:2.3:a:ibm:api_connect:10.0.8.10
-
cpe:2.3:a:ibm:api_connect:10.0.8.5