CVE-2026-17293 in API Connectinfo

Summary

by MITRE • 11/07/2026

IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to modify user profile information due to broken object-level authorization. Access checks do not confirm that the user is permitted to change the targeted profile.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsible

Ibm

Reservation

07/25/2026

Disclosure

11/07/2026

Moderation

accepted

EPSS

0.00000

KEV

no

Activities

very low

Sector

Industry, Chemical, ...

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-17293
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-17293
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-17293/

◂ PreviousOverviewNext ▸

Interested in the pricing of exploits?

See the underground prices here!