Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-77816 EUVD-2026-100488GHSA-6v8r-r3rp-wwmm

IBM WebSphere Application Server Liberty Improper Certificate Validation

Published Oct 13, 2026 · Updated Oct 14, 2026 · Assigned by ibm

Description

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 administrative client could allow man-in-the-middle attacks. An attacker could exploit this vulnerability to obtain sensitive information.

Affected products

VendorProductAffectedFixed
IBM WebSphere Application Server - Liberty 17.0.0.3 – ≤ 26.0.0.9 —

Advisories 1

References