Vulnerability Bulletins |
CVE-2026-17312 |
|
| Affected software | IBM |
| IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to force a user to authenticate into an attacker-controlled account due to cross-site request forgery. The sign-in flow does not sufficiently verify that a login response belongs to the user's own request, which could link the victim's session to an account controlled by the attacker. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-17312 | |