Medium · 4.3 CVE-2026-11547 EUVD-2026-119687GHSA-qqgw-pc7q-fjhx

IBM WebSphere Application Server Liberty prior to 26.0.0.11 is affected by multiple vulnerabilities

Published Nov 8, 2026 · Updated Nov 9, 2026 · Assigned by ibm

Vendor: IBM Product: WebSphere Application Server - Liberty

Description

IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.10 is affected by a server-side request forgery vulnerability in the Admin Center deploy validation endpoint.

Affected products

Vendor	Product	Affected	Fixed
IBM	WebSphere Application Server - Liberty	17.0.0.3 – ≤ 26.0.0.10	—

Advisories 1

WID-SEC-2026-4314 IBM WebSphere Application Server Liberty: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 9, 2026

References

https://www.ibm.com/support/pages/node/7295268 vendor-advisory patch