IBM API Connect 10.0.8.0-10.0.8.12, 12.1.0.0-12.1.1.2 Hard-coded creds Remote Admin
CVE-2026-17403 Published on November 7, 2026
Multiple Vulnerabilities in IBM API Connect
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to gain full administrative control due to the use of hard-coded credentials.
Vulnerability Analysis
CVE-2026-17403 can be exploited with network access, and does not require authorization privileges or user interaction. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to be critical as this vulnerability has a high impact to the confidentiality, integrity and availability of this component.
Weakness Type
Use of Hard-coded Credentials
The software contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.
Products Associated with CVE-2026-17403
Want to know whenever a new CVE is published for IBM Api Connect? stack.watch will email you.
Affected Versions
IBM API Connect:- Version 12.1.0.0, <= 12.1.1.2 is affected.
- Version 10.0.8.0, <= 10.0.8.12 is affected.