Skip to content

Known vulnerabilities in IBM API Connect

Is your version affected?

CVE Summary Score Published
CVE-2026-17299 Multiple Vulnerabilities in IBM API Connect 9.6 Critical Nov 7, 2026
CVE-2026-17298 Multiple Vulnerabilities in IBM API Connect 9.9 Critical Nov 7, 2026
CVE-2026-17297 Multiple Vulnerabilities in IBM API Connect 9.6 Critical Nov 7, 2026
CVE-2026-17296 Multiple Vulnerabilities in IBM API Connect 9.6 Critical Nov 7, 2026
CVE-2026-17292 Multiple Vulnerabilities in IBM API Connect 9.1 Critical Nov 7, 2026
CVE-2026-17278 Multiple Vulnerabilities in IBM API Connect 9.8 Critical Nov 7, 2026
CVE-2026-17239 Multiple Vulnerabilities in IBM API Connect 9.9 Critical Nov 7, 2026
CVE-2026-17158 Multiple Vulnerabilities in IBM API Connect 9.9 Critical Nov 7, 2026
CVE-2026-17150 Multiple Vulnerabilities in IBM API Connect 9.9 Critical Nov 7, 2026
CVE-2026-17147 Multiple Vulnerabilities in IBM API Connect 9.9 Critical Nov 7, 2026
CVE-2026-17146 Multiple Vulnerabilities in IBM API Connect 9.9 Critical Nov 7, 2026
CVE-2026-17134 Multiple Vulnerabilities in IBM API Connect 9.9 Critical Nov 7, 2026
CVE-2026-17132 Multiple Vulnerabilities in IBM API Connect 9.9 Critical Nov 7, 2026
CVE-2026-17131 Multiple Vulnerabilities in IBM API Connect 9.3 Critical Nov 7, 2026
CVE-2026-17117 Multiple Vulnerabilities in IBM API Connect 9.9 Critical Nov 7, 2026
CVE-2026-17066 Multiple Vulnerabilities in IBM API Connect 9.1 Critical Nov 7, 2026
CVE-2026-17049 Multiple Vulnerabilities in IBM API Connect 9.9 Critical Nov 7, 2026
CVE-2026-16920 Multiple Vulnerabilities in IBM API Connect 9.9 Critical Nov 7, 2026
CVE-2026-16918 Multiple Vulnerabilities in IBM API Connect 9.3 Critical Nov 7, 2026
CVE-2026-16884 Multiple Vulnerabilities in IBM API Connect 9.9 Critical Nov 7, 2026
CVE-2026-16720 Multiple Vulnerabilities in IBM API Connect 9.8 Critical Nov 7, 2026
CVE-2026-17362 Multiple Vulnerabilities in IBM API Connect 9.8 Critical Nov 7, 2026
CVE-2026-9074 IBM API Connect 10.0.8.0 through 10.0.8.9 and 12.1.0.0 through 12.1.0.3 contains an unauthenticated SQL injection… 9.1 Critical Jul 8, 2026
CVE-2025-13915 IBM API Connect 10.0.8.0 through 10.0.8.5, and 10.0.11.0 could allow a remote attacker to bypass authentication… 9.8 Critical Dec 26, 2025
CVE-2019-4202 IBM API Connect 5.0.0.0 and 5.0.8.6 Developer Portal is vulnerable to command injection 10.0 Critical Apr 15, 2019

Other IBM products