Medium · 4.4 CVE-2026-5516 EUVD-2026-32487GHSA-gccj-9cv3-fp5p

IBM WebSphere Application Server Liberty is affected by a security bypass vulnerability

Published May 27, 2026 · Updated Jun 2, 2026 · Assigned by ibm

Vendor: IBM Product: WebSphere Application Server - Liberty

Description

IBM WebSphere Application Server - Liberty 22.0.0.11 through 26.0.0.5 IBM WebSphere Application Server Liberty could allow a remote attacker to bypass security under limited conditions by exploiting a specific timing window.

Affected products

Vendor	Product	Affected	Fixed
IBM	WebSphere Application Server - Liberty	22.0.0.11 – ≤ 26.0.0.5	—

Advisories 2

WID-SEC-2026-2253 IBM Security Verify Access: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 17, 2026
WID-SEC-2026-1593 IBM WebSphere Application Server: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 15, 2026

References

https://www.ibm.com/support/pages/node/7273425 vendor-advisory patch