VulnSocial

CVE-2026-17285

LOWCVSS 7.7 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of external references. When schemas are validated, references to external resources are not sufficiently restricted, which could allow the server to retrieve content it should not access.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-918

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-11-07: 111-07
Referenced assets1 URL
Full discourse1 post
  • The Circuitry@thecircuitry_

    NVD lists CVE-2026-17285 in IBM API Connect. IBM's vector scores 7.7. NVD has not scored it. The record does not say the flaw is being exploited. https://thecircuitry.to/article/nvd-lists-cve-2026-17285-ibms-vector-scores-77-mw6dw7qn?utm_source=x&utm_medium=social&utm_campaign=article_tweet https://t.co/yylbD4TAAJ

    0000043
    42 followersView on X

Explore more

Back to dashboard