Skip to content

#api-gateway

2 articles

Security Alerts Nov 7, 2026

IBM API Connect: 47 Critical Vulnerabilities (CVE-2026-17360 and Others) — RCE, SQLi, Auth Bypass

IBM fixed 47 critical flaws in API Connect: hard-coded credentials, RCE, SQL and command injection, SSRF/XXE and tenant isolation bypass. Upgrade to 10.0.8.13 or 12.1.1.3...

Security Alerts Oct 8, 2026

CVE-2026-14269 and 5 More: Critical Flaws in IBM DataPower Gateway

IBM fixed a series of flaws in DataPower Gateway 11.0.0.3, 10.6.0.11 and 10.5.0.23, six of them critical: buffer overflows allowing unauthenticated code execution and acceptance of empty passwords in LDAP authentication...