CVE-2026-17313: Authentication Bypass in IBM API Connect 12.1

CVE-2026-17313 is a critical authentication bypass in IBM API Connect 12.1.0.0 through 12.1.1.2. The vulnerability exploits an alternate path that allows a remote attacker to circumvent authentication mechanisms, gaining access to sensitive information and taking control of API gateway configuration. Affected systems include all API gateways running vulnerable versions without patches.

Severity is rated as critical with CVSS 9.8, indicating maximum impact on confidentiality, integrity and availability. The vulnerability requires only remote access and no prior attacker authentication. Signals from social media (2 posts in the last 24 hours) confirm that the CVE is already under observation by the security community. Currently no public exploit has been reported on GitHub repositories.

Defenders must immediately identify systems running IBM API Connect versions 12.1.0.0-12.1.1.2 and verify patch availability status. It is recommended to contact IBM support for guidance on fixes or mitigation measures. In the meantime, it is essential to actively monitor gateway access logs to detect exploitation attempts or unauthorized configuration access.