Skip to content

Known vulnerabilities in IBM WebSphere Application Server - Liberty

Is your version affected?

CVE Summary Score Published
CVE-2026-9322 IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7… 7.5 High Jul 30, 2026
CVE-2026-10842 IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7… 7.5 High Jul 30, 2026
CVE-2026-11897 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to a denial of service, caused by… 7.5 High Jul 30, 2026
CVE-2026-14980 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to cross-site request forgery which… 8.3 High Jul 30, 2026
CVE-2026-2482 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to cross-site request forgery which… 3.1 Low Jul 29, 2026
CVE-2026-14529 IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8… 9.4 Critical Jul 29, 2026
CVE-2026-14976 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by remote code execution with the… 7.1 High Jul 28, 2026
CVE-2026-14981 IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty are affected by a denial of service… 7.5 High Jul 28, 2026
CVE-2026-15057 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to a denial of service due to… 7.5 High Jul 28, 2026
CVE-2026-15064 IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty is vulnerable to HTTP Response Smuggling… 8.7 High Jul 28, 2026
CVE-2026-15280 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 ND Collective Controller is affected by a… 7.5 High Jul 28, 2026
CVE-2026-15325 IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty is vulnerable to HTTP request… 8.7 High Jul 28, 2026
CVE-2026-15328 IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty is vulnerable to HTTP request smuggling 7.4 High Jul 28, 2026
CVE-2026-16192 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by a denial of service vulnerability… 7.1 High Jul 28, 2026
CVE-2026-11541 IBM CICS Transaction Gateway for Multiplatforms 9.1, 9.2, 9.3, and 10.1 IBM WebSphere Application Server 9.0, and 8.5… 7.4 High Jun 30, 2026
CVE-2026-11546 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is affected by a server-side request forgery… 7.1 High Jun 30, 2026
CVE-2026-11714 IBM WebSphere Application Server Liberty is affected by a server-side request forgery vulnerability with the… 8.5 High Jun 30, 2026
CVE-2026-11806 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 is affected by an arbitrary file read vulnerability… 7.2 High Jun 30, 2026
CVE-2026-9320 IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6… 5.9 Medium Jun 22, 2026
CVE-2026-9071 IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6… 7.5 High Jun 22, 2026
CVE-2026-8646 IBM WebSphere Application Server 9.0 and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6… 7.4 High Jun 22, 2026
CVE-2026-5516 IBM WebSphere Application Server - Liberty 22.0.0.11 through 26.0.0.5 IBM WebSphere Application Server Liberty could… 4.4 Medium May 27, 2026
CVE-2026-4410 IBM WebSphere Application Server - Liberty 19.0.0.7 through 26.0.0.5 and IBM WebSphere Application Server 9.0, and 8.5… 4.8 Medium May 27, 2026
CVE-2026-3621 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.4 IBM WebSphere Application Server Liberty is… 7.5 High Apr 22, 2026
CVE-2025-14917 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application Server Liberty could… 6.7 Medium Mar 25, 2026

Other IBM products