CVE-2026-17323

HIGH NVD

CVSS Score 8.2

Severity HIGH

Published Nov 07, 2026

Vendor unknown

Description

IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to XML external entity (XXE) injection.