Skip to content
OpenAdvisories
High WID-SEC-2026-2807 3 CVEs

IBM WebSphere Application Server Liberty: Mehrere Schwachstellen

Published Aug 12, 2026 · Updated Oct 4, 2026 · Revision 4 · de-DE

Vendor: IBM Product: Business Automation Workflow Product: SPSS Product: WebSphere Application Server - Liberty Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen in IBM WebSphere Application Server Liberty ausnutzen, um einen Denial of Service Angriff durchzuführen, um Sicherheitsvorkehrungen zu umgehen, und um seine Privilegien zu erhöhen.

Product

IBM WebSphere Application Server Liberty ist ein leichter, dynamischer Anwendungsserver zur Entwicklung und Bereitstellung von Java-Anwendungen und Microservices.

Vulnerabilities 3

  • Critical 9.4
    CVE-2026-14525

    IBM WebSphere Application Server Liberty is affected by an authenication bypass

    IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 IBM WebSphere Application Server Liberty is vulnerable to an authentication bypass when the rtcomm-1.0 or rtcommGateway-1.0 feature is enabled.

    IBM WebSphere Application Server - Liberty
  • High 8.1
    CVE-2026-18499

    IBM WebSphere Application Server Liberty is affected by a privilege escalation

    IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to a privilege escalation when using Liberty collectives.

    IBM WebSphere Application Server - Liberty
  • Medium 5.7
    CVE-2026-10571

    IBM WebSphere Application Server Liberty is affected by a denial of service

    IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by a denial of service caused by insecure deserialization. A low-privileged, administrative user could exploit this vulnerability to consume system resources when the restConnect…

    IBM WebSphere Application Server - Liberty

Revision history

  1. #4

    Neue Updates von IBM aufgenommen

  2. #3

    Neue Updates von IBM aufgenommen

  3. #2

    Referenz(en) aufgenommen: EUVD-2026-58362, EUVD-2026-58359

  4. #1

    Initiale Fassung

References