CWE-918: Server-Side Request Forgery vulnerabilities

CVE-2026-17288 is a high-severity vulnerability in IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2. It allows a remote authenticated attacker to perform server-side request forgery (SSRF), potentially leading to unauthorized access to sensitive information.

CVE-2026-17287 is a server-side request forgery (SSRF) vulnerability in IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2. It allows a remote authenticated attacker to cause the server to send requests to unintended destinations by exploiting insufficient validation of user-supplied addresses. This can lead to unauthorized access to sensitive information.

CVE-2026-17285 is a server-side request forgery (SSRF) vulnerability in IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2. The flaw arises from improper validation of external references during schema validation, allowing a remote authenticated attacker to cause the server to retrieve unauthorized content. This vulnerability can lead to the disclosure of sensitive information without impacting integrity or availability.

CVE-2026-17281 is a server-side request forgery (SSRF) vulnerability in IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2. This flaw allows a remote authenticated attacker to cause the server to make unintended requests, potentially leading to the exposure of sensitive information. The vulnerability has a high severity rating with a CVSS score of 7.7, indicating a significant confidentiality impact without affecting integrity or availability.

CVE-2026-17238 is a server-side request forgery (SSRF) vulnerability in IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2. The flaw arises from insufficient validation of values in the request path, which can allow a remote authenticated attacker to access sensitive information belonging to other tenants.

CVE-2026-17237 is a server-side request forgery (SSRF) vulnerability in IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2. A remote authenticated attacker could exploit this flaw to obtain sensitive information. The vulnerability has a medium severity with a CVSS score of 6.4.

CVE-2026-17233 is a server-side request forgery (SSRF) vulnerability in IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2. It allows a remote authenticated attacker to cause the server to make unauthorized requests to internal network services by supplying improperly validated URLs. This could lead to information disclosure about internal systems.

CVE-2026-17232 is a server-side request forgery (SSRF) vulnerability in IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2. It arises from improper neutralization of special elements in request parameters, allowing a remote attacker to bypass security restrictions by crafting specially formed requests. The vulnerability has a medium severity with a CVSS score of 6.1.

IBM API Connect versions 12.1.0.0 through 12.1.1.2 contain a server-side request forgery (SSRF) vulnerability. This flaw allows a remote authenticated attacker to bypass destination restrictions on outbound requests, potentially enabling the server to access unintended resources and obtain sensitive information.

CVE-2026-17188 is a high-severity server-side request forgery (SSRF) vulnerability in IBM API Connect versions 12.1.0.0 through 12.1.1.2. The flaw occurs because service definitions imported into the product do not sufficiently restrict references to external resources, allowing a remote authenticated attacker to cause the server to make unauthorized requests. This can lead to the disclosure of sensitive information.

CVE-2026-17187 is a server-side request forgery (SSRF) vulnerability in IBM API Connect versions 12.1.0.0 through 12.1.1.2. It allows a remote authenticated attacker to obtain sensitive information by exploiting improper validation of user-supplied URLs.

CVE-2026-17131 is a critical server-side request forgery (SSRF) vulnerability in IBM API Connect versions 12.1.0.0 through 12.1.1.2. It allows a remote attacker to bypass restrictions on outbound requests, causing the server to contact unintended destinations and potentially disclose sensitive information.

CVE-2026-17108 is a high-severity vulnerability in IBM API Connect versions 12.1.0.0 through 12.1.1.2. It involves server-side request forgery (SSRF) that could allow a remote authenticated attacker to obtain sensitive information. The vulnerability does not require user interaction and has a low attack complexity. It impacts confidentiality heavily but has limited impact on integrity and no impact on availability.

CVE-2026-17067 is a server-side request forgery (SSRF) vulnerability in IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2. It allows a remote authenticated attacker to access internal network resources by exploiting the SSRF flaw. The vulnerability has a medium severity with a CVSS score of 5.5.

CVE-2026-16918 is a critical server-side request forgery (SSRF) vulnerability in IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2. This flaw allows a remote attacker to make the server access internal network resources, potentially leading to unauthorized information disclosure. The vulnerability has a high CVSS score of 9.3, indicating severe impact on confidentiality with limited impact on integrity and no impact on availability.

CVE-2026-16912 is a high-severity vulnerability in IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2. It involves a server-side request forgery (SSRF) flaw that could allow a remote authenticated attacker to obtain sensitive information. The vulnerability does not require user interaction and impacts confidentiality with limited integrity impact and no availability impact.

CVE-2026-16710 is a server-side request forgery (SSRF) vulnerability in IBM API Connect versions 12.1.0.0 through 12.1.1.2. It allows a remote authenticated attacker to cause the server to make unauthorized requests, potentially leading to the exposure of sensitive information. The vulnerability has a medium severity with a CVSS score of 5.8.

Chartbrew versions 4.8.5 through 5.2.2 contain a server-side request forgery (SSRF) vulnerability. Authenticated users with permission to manage API connections can enable the internal allowPrivateHost field, bypassing restrictions on private and reserved network destinations. This allows requests to internal HTTP services accessible from the Chartbrew server, potentially exposing sensitive information or triggering unauthorized actions. The vulnerability is fixed in version 5.2.3.

Chartbrew versions prior to 5.2.1 contain a server-side request forgery (SSRF) vulnerability due to improper handling of NAT64-prefixed IPv4 addresses in outbound URL validation. Authenticated users with API connection management privileges can exploit this to send requests to internal IPv4 addresses via a NAT64 gateway, potentially accessing sensitive internal resources such as cloud metadata services. This issue is fixed in version 5.2.1.

CVE-2026-63440 is a time-of-check to time-of-use (TOCTOU) race condition vulnerability in Bubka 2FAuth versions prior to 8.0.0. The flaw allows an authenticated user with control over low-TTL authoritative DNS to bypass hostname validation and access internal or restricted network endpoints by manipulating DNS responses between validation and connection. This issue is resolved in version 8.0.0.