CVE-2026-18535

{
  "etk_id": "ETK-2026-3795",
  "cve_id": "CVE-2026-18535",
  "display_id": "CVE-2026-18535",
  "ghsa_id": "GHSA-68pw-29w8-gp2w",
  "euvd_id": "EUVD-2026-118926",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Wildcard query handling and ReDoS flaws in API Connect",
  "summary": "API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 are affected. An attacker with network access and existing privileges may cause resource exhaustion or misuse wildcard query behavior, potentially affecting service availability and data exposure.",
  "mitigation": "Upgrade to a vendor-supported release identified in IBM's current advisory guidance. Until then, restrict access to API Connect and its query interfaces to trusted, least-privileged users and monitor for unusually expensive or broad queries.",
  "vendor": "IBM",
  "product": "API Connect",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 12.1.0.0, <= 12.1.1.2",
        ">= 10.0.8.0, <= 10.0.8.12"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "API Connect",
      "purl": null
    }
  ],
  "cwes": [
    1333
  ],
  "cvss_score": 9.6,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 70.62147165,
  "t0_at": "2026-11-07T04:56:45.212000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-11-07T04:56:45.212000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-11-07T04:56:45.212000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-18535"
    }
  }
}