Skip to content

Known vulnerabilities in IBM WebSphere Application Server - Liberty

Is your version affected?

CVE Summary Score Published
CVE-2026-93905 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 could allow an unauthenticated remote attacker… 8.2 High Oct 13, 2026
CVE-2026-93909 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 is vulnerable by an authentication bypass… 9.1 Critical Oct 13, 2026
CVE-2026-93895 IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to… 9.1 Critical Oct 13, 2026
CVE-2026-95695 IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to bypass… 7.4 High Oct 13, 2026
CVE-2026-95696 IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to cause a denial… 6.5 Medium Oct 13, 2026
CVE-2026-101294 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and… 8.7 High Oct 13, 2026
CVE-2026-105442 IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty 17.0.0.3 through… 7.5 High Oct 13, 2026
CVE-2026-105443 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 has insufficient isolation between servers sharing… 8.2 High Oct 13, 2026
CVE-2026-11713 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 is affected by a privilege escalation vulnerability… 5.4 Medium Oct 13, 2026
CVE-2026-14532 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a Reader-role attacker to obtain… 4.3 Medium Oct 13, 2026
CVE-2026-14909 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 is affected by an information disclosure… 6.5 Medium Oct 13, 2026
CVE-2026-77816 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 administrative client could allow man-in-the-middle… 6.5 Medium Oct 13, 2026
CVE-2026-79715 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a local attacker to traverse… 5.5 Medium Oct 13, 2026
CVE-2026-103499 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and… 7.5 High Oct 13, 2026
CVE-2026-11722 IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8… 4.8 Medium Sep 18, 2026
CVE-2026-11549 IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through… 6.5 Medium Sep 18, 2026
CVE-2026-11548 IBM WebSphere Application Server 8.5 and 9.0, and and IBM WebSphere Application Server - Liberty 17.0.0.3 through… 4.8 Medium Sep 18, 2026
CVE-2026-10841 IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through… 4.8 Medium Sep 18, 2026
CVE-2026-15396 IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through… 6.5 Medium Sep 14, 2026
CVE-2026-15412 IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through… 6.5 Medium Sep 14, 2026
CVE-2026-15634 IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through… 6.5 Medium Sep 14, 2026
CVE-2026-14525 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 IBM WebSphere Application Server Liberty is… 9.4 Critical Aug 13, 2026
CVE-2026-10571 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by a denial of service caused by… 5.7 Medium Aug 13, 2026
CVE-2026-18499 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to a privilege escalation when… 8.1 High Aug 12, 2026
CVE-2026-8400 IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty Continuous delivery has a… 8.1 High Aug 5, 2026

Other IBM products