CVE-2026-11546

🗓️ 30 Jun 2026 19:51:21Reported by ibmType

IBM WebSphere Liberty SSRF when adminCenter-1.0 is enabled in versions 17.0.0.3 through 26.0.0.7.

Reporter	Title	Published	Views	Family All 13
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Enterprise Application Runtimes, is affected by a server-side request forgery vulnerability (CVE-2026-11546)	7 Jul 202619:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM WebSphere Hybrid Edition, is affected by a server-side request forgery vulnerability (CVE-2026-11546)	7 Jul 202619:33	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in IBM WebSphere Application (CVE-2026-50645, CVE-2026-9322, CVE-2026-11541, CVE-2026-4410, CVE-2026-9320, CVE-2026-8646, CVE-2026-11806, CVE-2026-9071, CVE-2026-11546, CVE-2026-5516) affects IBM PowerVM Novalink.	16 Jul 202615:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Cloud Pak for Applications, is affected by a server-side request forgery vulnerability (CVE-2026-11546)	7 Jul 202619:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty is affected by a server-side request forgery vulnerability (CVE-2026-11546)	14 Jul 202601:02	–	ibm
ATTACKERKB	CVE-2026-11546	30 Jun 202619:51	–	attackerkb
Circl	CVE-2026-11546	2 Jul 202608:28	–	circl
Cvelist	CVE-2026-11546 IBM WebSphere Application Server Liberty is affected by a server-side request forgery vulnerability	30 Jun 202619:51	–	cvelist
EUVD	EUVD-2026-40399	30 Jun 202619:51	–	euvd
NVD	CVE-2026-11546	30 Jun 202620:17	–	nvd

NVD

Vulners

Node

ibm websphere_application_serverRange17.0.0.3–26.0.0.8liberty

[
  {
    "vendor": "IBM",
    "product": "WebSphere Application Server - Liberty",
    "versions": [
      {
        "status": "affected",
        "version": "17.0.0.3",
        "lessThanOrEqual": "26.0.0.7",
        "versionType": "semver"
      }
    ],
    "cpes": [
      "cpe:2.3:a:ibm:websphere_application_server___liberty:17.0.0.3:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:websphere_application_server___liberty:26.0.0.7:*:*:*:*:*:*:*"
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/pages/node/7278572

02 Jul 2026 18:09Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.17.1 - 9.8

EPSS0.00222

SSVC

CWE-918