CVE-2026-17297 | BDVDB-2026-401422 Detail

Description#

IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to perform an account takeover due to an open redirect vulnerability. The redirect address used during sign-in is not sufficiently validated, which could allow authentication results to be sent to an attacker-controlled location.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-11-07Record published in the CVE List.
2. Version 22026-11-09Most recent update recorded in the CVE List.