low · CVSS v3 3.3

CVE-2026-17140

IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to …

Description

IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of generation of code. Input supplied by a user can influence code generated by the product, which could lead to code execution.

Scores

Severity
low
CVSS v2
3.2
CVSS v3
3.3
CVSS v4
—
EPSS
—

← All CVEs

Related CVEs

low

CVE-2026-17062

IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to modify internal requests due to improper neutralization of argument delimiters. Special characters in user-supplied input are not handled safely, which could allow additional parameters to be added to a request made by the server.

View analysis

low

CVE-2026-118187

The PublishPress Revisions plugin (before 4.3.1) fails to verify ownership when duplicating or revising posts, allowing users with contributor-level access to copy private or draft content from other users. This flaw enables unauthorized disclosure of content and potential manipulation of posts. It affects WordPress sites that use the plugin.

View analysis

low

CVE-2026-123292

JetBrains Datalore versions prior to 2026.4 allow API tokens and sessions of removed or banned users to remain valid, enabling continued access to the platform. This flaw can let attackers maintain unauthorized privileges after account revocation. The issue is limited to Datalore’s API and session management components.

View analysis

low

CVE-2026-123299

JetBrains Hub versions prior to 2026.2.52519 allow attackers to retrieve sensitive user information through search queries. The flaw can expose user identities and contact details. It does not enable code execution or privilege escalation.

View analysis