Is CVE-2026-17617 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-17617?

CVE-2026-17617 has a CVSS v3 severity of HIGH (8.5).

Back

CVE-2026-17617

Description

IBM Application Gateway Operator 22.2 through 26.06 is vulnerable to Server-Side Request Forgery (SSRF) due to insufficient validation of URLs specified in custom resources.