{"id":"CVE-2026-17211","kind":"vulnerability","aliases":["CVE-2026-17211"],"related":[],"title":"IBM API Connect: incorrect type conversion lets an authenticated user crash service","description":"IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to cause a denial of service due to incorrect type conversion. A value is converted incorrectly between two different types, which could cause the service to return invalid responses or become unavailable.","summary":"IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 convert a value incorrectly between two types. A remote attacker with a valid account can make the service return invalid responses or become unavailable.","severity":"medium","cvss":4.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["api-gateway","ibm-api-connect","infrastructure"],"not_affected_if":["unknown"],"how_to_check":"- Check the installed IBM API Connect version against the affected ranges 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2","fix":null,"status":"open","published_at":"2026-11-07T05:18:30+00:00","first_seen_at":"2026-11-07T05:46:00+00:00","triaged_at":"2026-11-07T05:54:26+00:00","updated_at":"2026-11-07T05:54:26+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-11-07T05:54:26Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"IBM API Connect: incorrect type conversion lets an authenticated user crash service","impact":"low","summary":"IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 convert a value incorrectly between two types. A remote attacker with a valid account can make the service return invalid responses or become unavailable.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["ibm-api-connect","api-gateway"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"service returns invalid responses or becomes unavailable","analyst_note":"","how_to_check":"- Check the installed IBM API Connect version against the affected ranges 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2\n- unknown for other checks; the sources do not say","plain_action":"","needs_analyst":false,"not_affected_if":["unknown"],"who_is_affected":"IBM API Connect deployments in the affected version ranges are exposed to a denial of service by any authenticated remote user. Instances that are not running those versions, or that do not expose the API management service to users with accounts, are less exposed. The sources do not say which configurations are affected beyond the version ranges.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000681,"input_tokens":4261,"output_tokens":510,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-17211':15A,18A '-2026':14A,17A '10.0.8.0':31B,65C '10.0.8.12':33B,67C '12.1.0.0':35B,69C '12.1.1.2':37B,71C 'account':51B 'allow':73C 'api':2A,20B,24B,28B,63C 'api-gateway':19B 'attack':47B,77C 'authent':9A,76C 'becom':60B,108C 'caus':79C,100C 'connect':3A,25B,29B,64C 'convers':6A,88C 'convert':38B,92C 'could':72C,99C 'crash':11A 'cve':13A,16A 'denial':81C 'differ':96C 'due':84C 'gateway':21B 'ibm':1A,23B,27B,62C 'ibm-api-connect':22B 'incorrect':4A,41B,86C,93C 'infrastructur':26B 'invalid':57B,105C 'let':7A 'make':53B 'remot':46B,75C 'respons':58B,106C 'return':56B,104C 'servic':12A,55B,83C,102C 'two':43B,95C 'type':5A,44B,87C,97C 'unavail':61B,109C 'user':10A 'valid':50B 'valu':40B,90C 'version':30B","nicknames":[],"mitigations":[],"who_affected":"IBM API Connect deployments in the affected version ranges are exposed to a denial of service by any authenticated remote user. Instances that are not running those versions, or that do not expose the API management service to users with accounts, are less exposed. The sources do not say which configurations are affected beyond the version ranges.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["apigateway","ibmapiconnect","infrastructure","medium"],"campaign_type":null,"search_a":"'-17211':15A,18A '-2026':14A,17A 'api':2A 'authent':9A 'connect':3A 'convers':6A 'crash':11A 'cve':13A,16A 'ibm':1A 'incorrect':4A 'let':7A 'servic':12A 'type':5A 'user':10A","search_b":"'10.0.8.0':31B '10.0.8.12':33B '12.1.0.0':35B '12.1.1.2':37B 'account':51B 'api':20B,24B,28B 'api-gateway':19B 'attack':47B 'becom':60B 'connect':25B,29B 'convert':38B 'gateway':21B 'ibm':23B,27B 'ibm-api-connect':22B 'incorrect':41B 'infrastructur':26B 'invalid':57B 'make':53B 'remot':46B 'respons':58B 'return':56B 'servic':55B 'two':43B 'type':44B 'unavail':61B 'valid':50B 'valu':40B 'version':30B","search_c":"'10.0.8.0':65C '10.0.8.12':67C '12.1.0.0':69C '12.1.1.2':71C 'allow':73C 'api':63C 'attack':77C 'authent':76C 'becom':108C 'caus':79C,100C 'connect':64C 'convers':88C 'convert':92C 'could':72C,99C 'denial':81C 'differ':96C 'due':84C 'ibm':62C 'incorrect':86C,93C 'invalid':105C 'remot':75C 'respons':106C 'return':104C 'servic':83C,102C 'two':95C 'type':87C,97C 'unavail':109C 'valu':90C","first_public_at":"2026-11-07T05:18:30+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss_by":"psirt@us.ibm.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-17211","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-17211","severity":null,"published_at":"2026-11-07T05:18:30+00:00","modified_at":"2026-11-07T05:18:30+00:00","first_seen_at":"2026-11-07T05:46:00+00:00","fetched_at":"2026-11-07T05:46:00+00:00","note":null}],"documents":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}