Skip to content
OpenAdvisories
High · 7.1 CVE-2026-11546 EUVD-2026-40399GHSA-7m34-7chv-8x87

IBM WebSphere Application Server Liberty is affected by a server-side request forgery vulnerability

Published Jun 30, 2026 · Updated Jul 1, 2026 · Assigned by ibm

Description

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is affected by a server-side request forgery vulnerability with the adminCenter-1.0 feature enabled.

Affected products

VendorProductAffectedFixed
IBM WebSphere Application Server - Liberty 17.0.0.3 – ≤ 26.0.0.7 —

Advisories 1

References