8.5
High
CVE-2026-17617 IBM Application Gateway Operator 22.2 through 26.06 is vulnerable to Server-Side Request Forgery (SSRF) due to…
Description
IBM Application Gateway Operator 22.2 through 26.06 is vulnerable to Server-Side Request Forgery (SSRF) due to insufficient validation of URLs specified in custom resources.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Application Gateway Operator 22.2 | 22.2.0 → 26.06 | No fix stated |