{"id":"CVE-2026-17144","kind":"vulnerability","aliases":["CVE-2026-17144"],"related":[],"title":"IBM API Connect: authenticated users can obtain sensitive information via input validation","description":"IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to improper input validation.","summary":"IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 fail to validate input properly. A remote attacker with a valid account can obtain sensitive information.","severity":"medium","cvss":4.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["api-gateway","ibm-api-connect","vendor"],"not_affected_if":["outside-affected-versions"],"how_to_check":"- Check the installed API Connect version against the affected ranges: 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2","fix":null,"status":"open","published_at":"2026-11-07T05:18:27+00:00","first_seen_at":"2026-11-07T05:45:59+00:00","triaged_at":"2026-11-07T05:54:28+00:00","updated_at":"2026-11-07T05:54:28+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-11-07T05:54:28Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"IBM API Connect: authenticated users can obtain sensitive information via input validation","impact":"low","summary":"IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 fail to validate input properly. A remote attacker with a valid account can obtain sensitive information.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["ibm-api-connect","api-gateway"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"Authenticated attacker reads sensitive information from the API Connect service","analyst_note":"Confirm the fixed versions and the type of sensitive information exposed from the IBM security bulletin for CVE-2026-17144.","how_to_check":"- Check the installed API Connect version against the affected ranges: 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2\n- unknown for other checks; the sources do not say","plain_action":"","needs_analyst":true,"not_affected_if":["outside-affected-versions"],"who_is_affected":"Organizations running IBM API Connect in the affected version ranges, where remote users hold accounts. The sources do not describe the specific data exposed or the configuration needed to reach it, so exposure beyond the version range is unknown.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000686,"input_tokens":4224,"output_tokens":528,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-17144':15A,18A '-2026':14A,17A '10.0.8.0':31B,57C '10.0.8.12':33B,59C '12.1.0.0':35B,61C '12.1.1.2':37B,63C 'account':49B 'allow':65C 'api':2A,20B,24B,28B,55C 'api-gateway':19B 'attack':45B,69C 'authent':4A,68C 'connect':3A,25B,29B,56C 'could':64C 'cve':13A,16A 'due':74C 'fail':38B 'gateway':21B 'ibm':1A,23B,27B,54C 'ibm-api-connect':22B 'improp':76C 'inform':9A,53B,73C 'input':11A,41B,77C 'obtain':7A,51B,71C 'proper':42B 'remot':44B,67C 'sensit':8A,52B,72C 'user':5A 'valid':12A,40B,48B,78C 'vendor':26B 'version':30B 'via':10A","nicknames":[],"mitigations":[],"who_affected":"Organizations running IBM API Connect in the affected version ranges, where remote users hold accounts. The sources do not describe the specific data exposed or the configuration needed to reach it, so exposure beyond the version range is unknown.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["apigateway","ibmapiconnect","medium","vendor"],"campaign_type":null,"search_a":"'-17144':15A,18A '-2026':14A,17A 'api':2A 'authent':4A 'connect':3A 'cve':13A,16A 'ibm':1A 'inform':9A 'input':11A 'obtain':7A 'sensit':8A 'user':5A 'valid':12A 'via':10A","search_b":"'10.0.8.0':31B '10.0.8.12':33B '12.1.0.0':35B '12.1.1.2':37B 'account':49B 'api':20B,24B,28B 'api-gateway':19B 'attack':45B 'connect':25B,29B 'fail':38B 'gateway':21B 'ibm':23B,27B 'ibm-api-connect':22B 'inform':53B 'input':41B 'obtain':51B 'proper':42B 'remot':44B 'sensit':52B 'valid':40B,48B 'vendor':26B 'version':30B","search_c":"'10.0.8.0':57C '10.0.8.12':59C '12.1.0.0':61C '12.1.1.2':63C 'allow':65C 'api':55C 'attack':69C 'authent':68C 'connect':56C 'could':64C 'due':74C 'ibm':54C 'improp':76C 'inform':73C 'input':77C 'obtain':71C 'remot':67C 'sensit':72C 'valid':78C","first_public_at":"2026-11-07T05:18:27+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss_by":"psirt@us.ibm.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-17144","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-17144","severity":null,"published_at":"2026-11-07T05:18:27+00:00","modified_at":"2026-11-07T05:18:27+00:00","first_seen_at":"2026-11-07T05:45:59+00:00","fetched_at":"2026-11-07T05:45:59+00:00","note":null}],"documents":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}