WID-SEC-W-2026-2156

DeutschShown in its original language — a full translation is planned for a future version.

IBM WebSphere Application Server Liberty: Mehrere Schwachstellen

view advisory published 2026-06-30

Ein Angreifer kann mehrere Schwachstellen in IBM WebSphere Application Server Liberty ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen, und um Sicherheitsvorkehrungen zu umgehen.

describes (2)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2026-11714US	critical9.8	0.36% (30th)	—	2026-06-30
IBM WebSphere Application Server Liberty is affected by a server-side request forgery vulnerability with the apiDiscovery-1.0 feature enabled.
CVE-2026-11546US	critical9.8	0.40% (34th)	—	2026-06-30
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is affected by a server-side request forgery vulnerability with the adminCenter-1.0 feature enabled.

references

External citations — patches, advisories, analysis.

WID-SEC-W-2026-2156 - CSAF Versionself
WID-SEC-2026-2156 - Portal Versionself
IBM Security Bulletin 7278572 vom 2026-06-30external
IBM Security Bulletin 7278580 vom 2026-06-30external
IBM Security Bulletin 7283170 vom 2026-08-10external

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan