Medium · 4.3 CVE-2026-78636 EUVD-2026-119725GHSA-69m4-3x63-wchw

IBM WebSphere Application Server Liberty prior to 26.0.0.11 is affected by multiple vulnerabilities

Published Nov 8, 2026 · Updated Nov 9, 2026 · Assigned by ibm

Vendor: IBM Product: WebSphere Application Server - Liberty

Description

IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.10 is affected by an information disclosure vulnerability due to unsafe class reflection in the JMX REST connector body parser.

Affected products

Vendor	Product	Affected	Fixed
IBM	WebSphere Application Server - Liberty	17.0.0.3 – ≤ 26.0.0.10	—

Advisories 1

WID-SEC-2026-4314 IBM WebSphere Application Server Liberty: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 9, 2026

References

https://www.ibm.com/support/pages/node/7295268 vendor-advisory patch