{"metadata": {"vulnerability": "CVE-2026-17409", "count": 14, "kinds": {"milestone": 4, "sighting": 5, "kev": 0, "other": 5}}, "data": [{"timestamp": "2026-07-25T05:14:28.481Z", "date_only": false, "value": "2026-07-25T05:14:28.481Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-17409", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-07T04:34:33.975Z", "date_only": false, "value": "2026-11-07T04:34:33.975Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-17409", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-07T04:34:33.975Z", "date_only": false, "value": "2026-11-07T04:34:33.975Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-17409", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-07T04:34:33.975Z", "date_only": false, "value": "2026-11-07T04:34:33.975Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / ibm", "record": "CVE-2026-17409", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-07T05:18:58Z", "date_only": false, "value": "2026-11-07T05:18:58Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-82W4-F9HP-QFH6", "record": "GHSA-82W4-F9HP-QFH6", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-07T05:18:58.157Z", "date_only": false, "value": "2026-11-07T05:18:58.157", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-17409", "record": "FKIE_CVE-2026-17409", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-07T05:18:58.353Z", "date_only": false, "value": "2026-11-07T05:18:58.353", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-17409", "record": "FKIE_CVE-2026-17409", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-11-07T06:13:31.313Z", "date_only": false, "value": "2026-11-07T06:13:31.313487Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/vuldb/statuses/117573681860534323", "record": "CVE-2026-17409", "field": "creation_timestamp", "uuid": "4e631e9c-9e38-4267-8786-3614b0ee9107", "content": "\u26a0\ufe0f A severe vulnerability was disclosed for IBM API Connect (CVE-2026-17409) https://vuldb.com/vuln/432388", "url": "https://infosec.exchange/users/vuldb/statuses/117573681860534323"}, {"timestamp": "2026-11-07T06:13:51.873Z", "date_only": false, "value": "2026-11-07T06:13:51.873832Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mzpakys2jx2n", "record": "CVE-2026-17409", "field": "creation_timestamp", "uuid": "38b1c984-c024-4772-b942-6ea167acbdd3", "content": "\ud83d\udea8 CVE-2026-17409 \u2014 CVSS 9.4 CRITICAL\n\nIBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to e...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-17409\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mzpakys2jx2n"}, {"timestamp": "2026-11-07T06:31:22Z", "date_only": false, "value": "2026-11-07T06:31:22Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-82W4-F9HP-QFH6", "record": "GHSA-82W4-F9HP-QFH6", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-07T06:31:22Z", "date_only": false, "value": "2026-11-07T06:31:22Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-82W4-F9HP-QFH6", "record": "GHSA-82W4-F9HP-QFH6", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-07T06:46:18.495Z", "date_only": false, "value": "2026-11-07T06:46:18.495712Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117573810776542296", "record": "CVE-2026-17409", "field": "creation_timestamp", "uuid": "4145fe94-2199-415e-916a-a110aba605ef", "content": "CVE-2026-17409 Multiple Vulnerabilities in IBM API Connect IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized administrative operations and obtain sensitive information due to improper handling of case sensitivity. Access controls are not applied consistently to all variations of a request, which could allow restricted operations to be reached.\nhttps://www.cve.org/CVERecord?id=CVE-2026-17409https://www.ibm.com/support/pages/node/7295635https://www.ibm.com/support/pages/node/7295637#ibm #IBM #APIConnect#CVE_2026_17409#bot", "url": "https://infosec.exchange/users/cve/statuses/117573810776542296"}, {"timestamp": "2026-11-07T08:18:55.725Z", "date_only": false, "value": "2026-11-07T08:18:55.725311Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mzphkmoxst2n", "record": "CVE-2026-17409", "field": "creation_timestamp", "uuid": "9686e013-2ac5-45f4-90cd-a33c1a46b4f5", "content": "\ud83d\udd34 CVE-2026-17409 - Critical (9.4)\n\nIBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote att...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-17409/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mzphkmoxst2n"}, {"timestamp": "2026-11-07T08:30:09.079Z", "date_only": false, "value": "2026-11-07T08:30:09.079228Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mzpi6mluc22w", "record": "CVE-2026-17409", "field": "creation_timestamp", "uuid": "eba6f548-8b2d-4f5e-9168-376c0951e99b", "content": "CVE-2026-17409 - api connect\nVersions of IBM API Connect from 10.0.8.0 to 10.0.8.12 and 12.1.0.0 to 12.1.1.2 can mishandle case differences in requests, causing access rules to be applied inconsistently. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apiconnect #ibm #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mzpi6mluc22w"}], "metrics": {"as_of": "2026-11-07T23:29:45.471Z", "anchors": {"origin": {"timestamp": "2026-11-07T04:34:33.975Z", "date_only": false, "value": "2026-11-07T04:34:33.975Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-17409", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-07T04:34:33.975Z", "date_only": false, "value": "2026-11-07T04:34:33.975Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-17409", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 68111.496384, "hours": 18.919860106666665, "days": 0.7883275044444444, "min_seconds": 68111.496384, "max_seconds": 68111.496384, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-07T04:34:33.975Z", "date_only": false, "value": "2026-11-07T04:34:33.975Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-17409", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-07T23:29:45.471Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}