Threats affecting pkg:rpm/ibm/api_connect

CVE-2026-19128 is a server-side request forgery (SSRF) vulnerability in IBM API Connect versions 12.1.0.0 through 12.1.1.2. An authenticated attacker could exploit this flaw to send unauthorized requests from the system, potentially enumerating internal network resources or facilitating further attacks. The vulnerability has a high severity rating with a CVSS score of 7.5.

CVE-2026-17378 is an incorrect authorization vulnerability in IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2. It allows a remote authenticated attacker to access sensitive information due to broken object-level authorization controls.