CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-17617

IBM Application Gateway Operator 22.2 through 26.06 is vulnerable to Server-Side Request Forgery (SSRF) due to insufficient validation of URLs specified in custom resources.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 21.2%

CVSS Severity

CVSS v3 Score 8.5

References

https://www.ibm.com/support/pages/node/7282296

Products affected by CVE-2026-17617

Ibm » Application Gateway Operator » Version: 22.11.0

cpe:2.3:a:ibm:application_gateway_operator:22.11.0
Ibm » Application Gateway Operator » Version: 22.2.0

cpe:2.3:a:ibm:application_gateway_operator:22.2.0
Ibm » Application Gateway Operator » Version: 22.3.0

cpe:2.3:a:ibm:application_gateway_operator:22.3.0
Ibm » Application Gateway Operator » Version: 23.11.0

cpe:2.3:a:ibm:application_gateway_operator:23.11.0
Ibm » Application Gateway Operator » Version: 24.4.0

cpe:2.3:a:ibm:application_gateway_operator:24.4.0
Ibm » Application Gateway Operator » Version: 25.2.0

cpe:2.3:a:ibm:application_gateway_operator:25.2.0
Ibm » Application Gateway Operator » Version: 26.6.0

cpe:2.3:a:ibm:application_gateway_operator:26.6.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-17617

Products

Pricing

Contact Us