High · 7.2 CVE-2026-11806 EUVD-2026-40394GHSA-cxrq-p7xp-m9hw

IBM WebSphere Application Server Liberty is affected by a an arbitrary file read vulnerability

Published Jun 30, 2026 · Updated Jul 2, 2026 · Assigned by ibm

Vendor: IBM Product: WebSphere Application Server - Liberty

Description

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 is affected by an arbitrary file read vulnerability with the restConnector-2.0 feature enabled.

Affected products

Vendor	Product	Affected	Fixed
IBM	WebSphere Application Server - Liberty	17.0.0.3 – ≤ 26.0.0.6	—

Advisories 1

WID-SEC-2026-2050 IBM WebSphere Application Server und Application Server Liberty: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 14, 2026

References

https://www.ibm.com/support/pages/node/7277536 vendor-advisory patch