CVE-2026-17617
Server-Side Request Forgery (SSRF) in IBM Application Gateway Operator
IBM Application Gateway Operator 22.2 through 26.06 is vulnerable to Server-Side Request Forgery (SSRF) due to insufficient validation of URLs specified in custom resources.
CVSS 3.1 · 8.5 High
EPSS < 1%
KEV · Not listed
Vendors
Products