CVE-2026-17392

LOWCVSS 9.9 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to gain unauthorized administrative access to other tenants due to LDAP injection. User-supplied input is not properly neutralized in directory queries, which could change the query and grant access beyond the user's own tenant.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-90

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

2 mentions across 2 observed days
Momentum state: stable

What's happening

Peaked 1d ago at 1 mentions (2026-11-07); latest day: 1
2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d

Referenced assets1 URL

By indicator

https://cve.new/CVE-2026-17392

Full discourse2 posts

cve.new@cvedotnew1d
CVE-2026-17392 · CRITICAL · CVSS 9.9 IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 may allow a remote authenticated attacker to gain unauthorized administrative access due to LDAP injection. CVSS 3.1 · ibm https://cve.new/CVE-2026-17392
2402301.3K
884 followersView on X
Alvif Sandana Mahardika@siDandott19h
A 9.9 is bad. A whole bulletin of them is worse. IBM's Nov 7 API Connect bulletin: multiple critical flaws. Headline: CVE-2026-17392, LDAP injection (CVSS 9.9) letting an authenticated attacker gain admin access to other tenants. Fix: upgrade to 12.1.1.3.
0000020
44 followersView on X

Explore more

Back to dashboard