Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 785 | 0,2 % |
| ≥50 % | 3.557 | 0,9 % |
| ≥10 % | 13.139 | 3,2 % |
| <10 % | 391.261 | 95,7 % |
Hackers Exploit SonicWall SSL-VPN Vulnerability to Bypass Multi-Factor Authentication in Active Attacks
SonicWall has disclosed an SSL-VPN authentication enforcement flaw that could let attackers bypass SAML authentication and associated multi-factor authentication controls. Tracked as CVE-2026-19868, the issue carries a CVSS score of 7.1. Ad
CVE-2025-61505 | e107 CMS up to 2.3.3 POST Parameter install.php base64_decode previous_steps deserialization
A vulnerability described as critical has been identified in e107 CMS up to 2.3.3. Impacted is the function base64_decode of the file install.php of the component POST Parameter Handler. The manipulation of the argument previous_steps resul
CVE-2025-60838 | MCMS 6.0.1 unrestricted upload
A vulnerability marked as critical has been reported in MCMS 6.0.1. Impacted is an unknown function. This manipulation causes unrestricted upload. This vulnerability appears as CVE-2025-60838. The attack may be initiated remotely. There is
CVE-2025-60535 | Wallos 4.1.1 GET Request currency cross-site request forgery
A vulnerability, which was classified as problematic, was found in Wallos 4.1.1. This affects an unknown function of the file /endpoints/currency/currency of the component GET Request Handler. The manipulation results in cross-site request
CVE-2025-60308 | code-projects Simple Online Hotel Reservation System 1.0 Add Room Description cross site scripting
A vulnerability, which was classified as problematic, was found in code-projects Simple Online Hotel Reservation System 1.0. The impacted element is an unknown function of the component Add Room Handler. Executing a manipulation of the argu
CVE-2025-60306 | code-projects Simple Car Rental System 1.0 permission
A vulnerability marked as critical has been reported in code-projects Simple Car Rental System 1.0. This affects an unknown part. The manipulation leads to permission issues. This vulnerability is traded as CVE-2025-60306. It is possible to
CVE-2025-60269 | JeeWMS 20250820 CgExportExcelController.java exportXls sql injection
A vulnerability was found in JeeWMS 20250820. It has been declared as critical. Impacted is the function exportXls of the file src/main/java/org/jeecgframework/web/cgreport/controller/excel/CgExportExcelController.java. Executing a manipula
CVE-2025-56747 | Creativeitem Academy LMS up to 5.13 Api_instructor Controller privileges management
A vulnerability, which was classified as critical, was found in Creativeitem Academy LMS up to 5.13. Affected by this issue is some unknown functionality of the component Api_instructor Controller. Such manipulation leads to improper privil
CVE-2025-55903 | CodeCanyon Perfex CRM 3.3.1 Estimate Bill To cross site scripting
A vulnerability labeled as problematic has been found in CodeCanyon Perfex CRM 3.3.1. This impacts an unknown function of the component Estimate Module. Such manipulation of the argument Bill To leads to basic cross site scripting. This vul
CVE-2025-54603 | Claroty Secure Access up to 4.0.2 improper authentication
A vulnerability, which was classified as critical, has been found in Claroty Secure Access up to 4.0.2. The impacted element is an unknown function. The manipulation leads to improper authentication. This vulnerability is documented as CVE-
CVE-2026-63687 | Apache CXF up to 3.6.11/4.1.7/4.2.2 JwtRequestCodeFilter nonce improper authentication (WID-SEC-2026-2682)
A vulnerability classified as critical has been found in Apache CXF up to 3.6.11/4.1.7/4.2.2. This affects the function JwtRequestCodeFilter. Performing a manipulation of the argument nonce results in improper authentication. This vulnerabi
CVE-2026-61466 | Apache CXF up to 3.6.11/4.1.7/4.2.2 Dynamic Client Registration privileges management (WID-SEC-2026-2682)
A vulnerability described as critical has been identified in Apache CXF up to 3.6.11/4.1.7/4.2.2. Affected by this issue is some unknown functionality of the component Dynamic Client Registration. Such manipulation leads to improper privile
CVE-2026-57818 | Apache CXF up to 3.6.11/4.1.7/4.2.2 JCacheCodeDataProvider toctou (WID-SEC-2026-2682)
A vulnerability marked as critical has been reported in Apache CXF up to 3.6.11/4.1.7/4.2.2. Affected by this vulnerability is an unknown functionality of the component JCacheCodeDataProvider. This manipulation causes time-of-check time-of-
CVE-2026-57817 | Apache CXF up to 3.6.11/4.1.7/4.2.2 c_hash input validation (WID-SEC-2026-2682)
A vulnerability was found in Apache CXF up to 3.6.11/4.1.7/4.2.2 and classified as critical. This issue affects some unknown processing. The manipulation of the argument c_hash results in improper input validation. This vulnerability is cat
CVE-2026-94218 | Red Hat Keycloak/Single Sign-On Session Management improper authentication (EUVD-2026-83846 / WID-SEC-2026-3484)
A vulnerability, which was classified as critical, was found in Red Hat Keycloak and Single Sign-On. The impacted element is an unknown function of the component Session Management. Such manipulation leads to improper authentication. This v
CVE-2026-94217 | Red Hat Keycloak/Single Sign-On UMA Implementation permission (EUVD-2026-83845 / WID-SEC-2026-3484)
A vulnerability has been found in Red Hat Keycloak and Single Sign-On and classified as problematic. This affects an unknown function of the component UMA Implementation. Performing a manipulation results in permission issues. This vulnerab
CVE-2026-94215 | Red Hat Keycloak Admin REST API privileges management (EUVD-2026-83841 / WID-SEC-2026-3484)
A vulnerability, which was classified as problematic, has been found in Red Hat Keycloak. The affected element is an unknown function of the component Admin REST API. This manipulation causes improper privilege management. This vulnerabilit
CVE-2025-61319 | ReNgine up to 2.2.0 Vulnerabilities cross site scripting
A vulnerability classified as problematic has been found in ReNgine up to 2.2.0. This vulnerability affects unknown code of the component Vulnerabilities Module. The manipulation leads to cross site scripting. This vulnerability is referenc
CVE-2025-60869 | Publii CMS 0.46.5 Build 17089 Site Description/Footer Follow Buttons cross site scripting
A vulnerability was found in Publii CMS 0.46.5 Build 17089. It has been rated as problematic. Affected by this vulnerability is an unknown functionality. This manipulation of the argument Site Description/Footer Follow Buttons causes cross
CVE-2025-60375 | Perfex CRM up to 3.3.0 password improper authentication
A vulnerability, which was classified as critical, was found in Perfex CRM up to 3.3.0. Affected by this issue is some unknown functionality. Such manipulation of the argument Password leads to improper authentication. This vulnerability is
CVE-2025-60307 | code-projects Computer Laboratory System 1.0 Password Field sql injection
A vulnerability, which was classified as critical, has been found in code-projects Computer Laboratory System 1.0. The affected element is an unknown function of the component Password Field Handler. Performing a manipulation results in sql
CVE-2025-60305 | SourceCodester Online Student Clearance System 1.0 access control
A vulnerability identified as critical has been detected in SourceCodester Online Student Clearance System 1.0. Impacted is an unknown function. The manipulation leads to improper access controls. This vulnerability is traded as CVE-2025-60
CVE-2026-89092 | GNU C Library up to 2.44 nscd stack-based overflow (Nessus ID 377033 / WID-SEC-2026-3317)
A vulnerability was found in GNU C Library up to 2.44. It has been declared as critical. The impacted element is an unknown function of the component nscd. Executing a manipulation can lead to stack-based buffer overflow. This vulnerability
CVE-2026-113733 | djangoproject Django up to 6.0.9/6.1.2 Admin Utils utils.py django.contrib.admin.utils.display_for_field information disclosure (Nessus ID 377035)
A vulnerability was found in djangoproject Django up to 6.0.9/6.1.2 and classified as problematic. This issue affects the function django.contrib.admin.utils.display_for_field of the file django/contrib/admin/utils.py of the component Admin
CVE-2026-111211 | Django Software Foundation up to 5.2.18/6.0.9/6.1.2 Geometry Widget widgets.py neutralization for logs (Nessus ID 377036)
A vulnerability classified as problematic was found in Django Software Foundation Django up to 5.2.18/6.0.9/6.1.2. Affected by this vulnerability is the function django.contrib.gis.forms.widgets.BaseGeometryWidget.deserialize of the file dj
CVE-2026-114582 | Django Software Foundation up to 5.2.18/6.0.9/6.1.2 SpatialReference __init__.py transform srs/srid server-side request forgery (Nessus ID 377036)
A vulnerability was found in Django Software Foundation Django up to 5.2.18/6.0.9/6.1.2. It has been declared as critical. The affected element is the function transform of the file django/contrib/gis/gdal/__init__.py of the component Spati
CVE-2026-18836 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to server-side request forgery. The affected component can be made to send requests to unintended destinations and return the response to the attacker.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to server-side request forgery. The affected component can be made to send requests to unintended des
CVE-2026-18689 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow an authenticated user to obtain limited information about other organizations due to incorrect authorization. A token issued for a limited purpose is accepted where it should not be, which could reveal the names of other organizations.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow an authenticated user to obtain limited information about other organizations due to incorrect authorization. A token issued for a limited purpose is accep
CVE-2026-17428 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to improper authorization. Values supplied in the request URL are used in authorization decisions without sufficient verification, which could allow access to information belonging to others.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to improper authorization. Values supplied in the request URL are used in authorization
CVE-2026-17411 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow an authenticated attacker to view, add, modify, or delete information in the back-end database due to SQL injection. Input is not properly neutralized before it is used in database queries.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow an authenticated attacker to view, add, modify, or delete information in the back-end database due to SQL injection. Input is not properly neutralized befo
CVE-2026-17410 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to access and modify other tenants' portal data due to improper neutralization of argument delimiters.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to access and modify other tenants' portal data due to improper neutralization of argument delimiters.
CVE-2026-17409 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized administrative operations and obtain sensitive information due to improper handling of case sensitivity. Access controls are not applied consistently to all variations of a request, which could allow restricted operations to be reached.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized administrative operations and obtain sensitive information due to improper handling of case sensitivity. Access c
CVE-2026-17408 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements in an OS command.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements in an OS command.
CVE-2026-17407 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to SQL injection. Values received during sign-in are not properly neutralized before being used in a database query, which could allow SQL commands to run.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to SQL injection. Values received during sign-in are not properly neutralized before
CVE-2026-17406 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery. Address checks can be bypassed, which could allow the server to reach destinations that should be blocked.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery. Address checks can be bypassed, which could allow the s
CVE-2026-17405 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to broken object-level authorization. Access checks on keystore objects do not confirm that the requesting user is permitted to read them, which could expose keystore information.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to broken object-level authorization. Access checks on keystore objects do not confirm
CVE-2026-17404 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.
CVE-2026-17403 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to gain full administrative control due to the use of hard-coded credentials.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to gain full administrative control due to the use of hard-coded credentials.
CVE-2026-17402 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary commands due to OS command injection. User-supplied input is not properly neutralized before it is passed to the operating system, which could allow commands to run on the underlying host.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary commands due to OS command injection. User-supplied input is not properly neutralized before it is pas
CVE-2026-17401 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.
CVE-2026-17400 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to SQL injection.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to SQL injection.
CVE-2026-17399 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to insufficient validation of uploaded content. Content uploaded to the product is not sufficiently checked before it is processed, which could allow code to run on the server.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to insufficient validation of uploaded content. Content uploaded to the product is not suffic
CVE-2026-17398 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.
CVE-2026-17397 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.
CVE-2026-17396 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to SQL injection.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to SQL injection.
CVE-2026-17395 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to access internal network resources due to improper validation of a user-supplied URL. Destinations are not sufficiently restricted, which could allow the server to be made to contact internal systems.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to access internal network resources due to improper validation of a user-supplied URL. Destinations are not sufficiently r
CVE-2026-17394 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to improperly controlled modification of object attributes. A user-supplied value could change an access-related setting that should be controlled by the system, which could expose sensitive information.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to improperly controlled modification of object attributes. A user-supplied value could
CVE-2026-17392 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to gain unauthorized administrative access to other tenants due to LDAP injection. User-supplied input is not properly neutralized in directory queries, which could change the query and grant access beyond the user's own tenant.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to gain unauthorized administrative access to other tenants due to LDAP injection. User-supplied input is not properly neut
CVE-2026-17391 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to broken object-level authorization.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to broken object-level authorization.
CVE-2026-17390 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow an authenticated user to execute arbitrary JavaScript in the web UI due to cross-site scripting. This could alter the intended functionality of the page and potentially lead to credential disclosure within a trusted session.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow an authenticated user to execute arbitrary JavaScript in the web UI due to cross-site scripting. This could alter the intended functionality of the page an
CVE-2026-17389 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information from the connected LDAP directory due to LDAP injection. Input is not properly neutralized in directory lookups, which could cause queries to return additional data.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information from the connected LDAP directory due to LDAP injection. Input is not properly neutralized in directory l
CVE-2026-17388 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to broken object-level authorization.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to broken object-level authorization.
CVE-2026-17387 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to broken object-level authorization.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to broken object-level authorization.
CVE-2026-17385 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.
CVE-2026-17383 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information from other tenants due to broken object-level authorization.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information from other tenants due to broken object-level authorization.
CVE-2026-17382 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to a path traversal vulnerability.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to a path traversal vulnerability.
CVE-2026-17381 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to improper authorization validation using user-controlled keys.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to improper authorization validation using user-controlled keys.
CVE-2026-17380 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to access sensitive information belonging to other tenants due to improper validation of a path parameter. A path value in a request is not sufficiently validated, which could allow a user to reach data outside their own tenant.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to access sensitive information belonging to other tenants due to improper validation of a path parameter. A path value in
CVE-2026-17379 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to bypass authentication and assign arbitrary roles due to improper verification of cryptographic signatures.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to bypass authentication and assign arbitrary roles due to improper verification of cryptographic signatures.
CVE-2026-17378 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to broken object-level authorization.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to broken object-level authorization.