CVE-2026-17236

CVE-2026-17236CVE-2026-17236

Description

IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to improper authorization. Authorization checks are not applied when certain organization URLs are resolved, which could allow access to information belonging to others.

Scoring

CVSS 6.4 ()
VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Last modified2026-11-07
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.