{
  "title": "CVE of the day — CVE-2026-17298 (CVSS 9,9, critic)",
  "title_variants": [
    {
      "id": "v0",
      "title": "CVE of the day — CVE-2026-17298 (CVSS 9,9, critic)"
    },
    {
      "id": "v1",
      "title": "CVE-2026-17298: critical vulnerability, CVSS 9,9/10, server-side request forgery (SSRF),"
    }
  ],
  "description": "CVE-2026-17298: critical vulnerability, CVSS 9,9/10, server-side request forgery (SSRF), exploitable remotely, with low privileges, without user interaction. IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow remotely attacker to obtain sensitive..",
  "keywords": [
    "c",
    "cve-2026-17298",
    "vulnerability",
    "critical vulnerability",
    "♪",
    "cvs",
    "cybersecurity",
    "cybersecurity",
    "♪",
    "security update"
  ],
  "scenes": [
    {
      "title": "CVE-2026- 172",
      "subtitle": "CVSS 9,9",
      "text": "CVE-2026-17298: Critical gravity, CVSS score 9.9 out of 10 according to the National Vulnerability Database."
    },
    {
      "title": "Server-side request forgery (SSRF)",
      "subtitle": "server-side request forgery (SSRF) · CVSS v3.1",
      "text": "IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow to remotely attacker to obtain sensitive information due to server-side request forgery."
    },
    {
      "title": "EXPOSURE AND MITIGATION",
      "subtitle": "remotely exploitable, with low privileges, without user interaction",
      "text": "Remotely exploitable Vulnerability, with low privileges, without user interaction. Apply the update of the supplier promptly and consult the official notice on NVD."
    }
  ],
  "publication_date": "2026-11-09T04:25:49.970Z",
  "duration": 20,
  "topic": "cve",
  "lang": "en",
  "translation_group": "cve-2026-11-09",
  "poster": "cve-2026-11-09-en.jpg",
  "preview": "cve-2026-11-09-en.gif",
  "og_card": "cve-2026-11-09-en.og.jpg",
  "audiogram": "cve-2026-11-09-en.audiogram.mp4",
  "captions": "cve-2026-11-09-en.vtt",
  "generation": {
    "procedural": true,
    "ai_generated": [
      "background",
      "voice"
    ],
    "real_data_source": "official public API",
    "filmed_real_event": false,
    "disclosure": "Procedurally generated from real public-source data; abstract AI-generated backgrounds; synthetic (TTS) voice. No real event is filmed or altered."
  },
  "transcript_text": "CVE-2026-17298: Critical gravity, CVSS score 9.9 out of 10 according to the National Vulnerability Database. IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow to remotely attacker to obtain sensitive information due to server-side request forgery. Remotely exploitable Vulnerability, with low privileges, without user interaction. Apply the update of the supplier promptly and consult the official notice on NVD.",
  "transcript": [
    {
      "start": 0,
      "end": 6.667,
      "text": "CVE-2026-17298: Critical gravity, CVSS score 9.9 out of 10 according to the National Vulnerability Database."
    },
    {
      "start": 6.667,
      "end": 13.333,
      "text": "IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow to remotely attacker to obtain sensitive information due to server-side request forgery."
    },
    {
      "start": 13.333,
      "end": 20,
      "text": "Remotely exploitable Vulnerability, with low privileges, without user interaction. Apply the update of the supplier promptly and consult the official notice on NVD."
    }
  ]
}