CVE-2026-3621

🗓️ 22 Apr 2026 23:07:31Reported by ibmType

CVE-2026-3621 affects Liberty WebSphere; identity spoofing when deployed without authentication.

Reporter	Title	Published	Views	Family All 18
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty is affected by identity spoofing (CVE-2026-3621)	22 Apr 202619:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses WebSphere Application Server Liberty which is vulnerable to CVE-2026-3621.	3 Jun 202614:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Cloud Pak for Applications, is affected by an identity spoofing vulnerability (CVE-2026-3621)	27 Apr 202615:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SPSS Analytic Server is affected by multiple vulnerabilities in IBM WebSphere Application Server Liberty	21 May 202615:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component uses WebSphere Application Server Liberty which was affected by identity spoofing which is vulnerable to CVE-2026-3621	29 May 202606:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Enterprise Application Runtimes, is affected by an identity spoofing vulnerability (CVE-2026-3621)	27 Apr 202615:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM WebSphere Hybrid Edition, is affected by an identity spoofing vulnerability (CVE-2026-3621)	27 Apr 202615:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Predict Component uses WebSphere Application Server Liberty was affected by identity spoofing (CVE-2026-3621)	29 May 202609:07	–	ibm
ATTACKERKB	CVE-2026-3621	22 Apr 202623:07	–	attackerkb
Circl	CVE-2026-3621	22 Apr 202618:45	–	circl

NVD

Vulners

Node

ibm websphere_application_serverRange17.0.0.3–26.0.0.5liberty

[
  {
    "vendor": "IBM",
    "product": "WebSphere Application Server - Liberty",
    "versions": [
      {
        "status": "affected",
        "version": "17.0.0.3",
        "lessThanOrEqual": "26.0.0.4",
        "versionType": "semver"
      }
    ],
    "cpes": [
      "cpe:2.3:a:ibm:websphere_application_server___liberty:17.0.0.3:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:websphere_application_server___liberty:26.0.0.4:*:*:*:*:*:*:*"
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/pages/node/7270437

13 May 2026 20:24Current

5.7Medium risk

Vulners AI Score5.7

CVSS 3.15.9 - 7.5

EPSS0.00045

SSVC

CWE-269