CVE-2026-5516

🗓️ 27 May 2026 13:00:04Reported by ibmType

WebSphere Liberty security bypass vulnerability allows remote access via timing window in 22.0.0.11 to 26.0.0.5.

Reporter	Title	Published	Views	Family All 18
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM WebSphere Hybrid Edition, is affected by a security bypass vulnerability (CVE-2026-5516)	8 Jun 202618:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Enterprise Application Runtimes, is affected by a security bypass vulnerability (CVE-2026-5516)	8 Jun 202618:36	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of WebSphere Application Server Liberty, IBM Tivoli Application Dependency Discovery Manager is affected by multiple vulnerabilities	25 Jun 202610:03	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities within WebSphere Application Server Liberty, affect IBM Tivoli Monitoring.	30 Jun 202617:46	–	ibm
IBM Security Bulletins	Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in IBM WebSphere Application Server Liberty	26 Jun 202604:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Financial Transaction Manager v4 is impacted by multiple vulnerabilities in WebSphere Application Server Liberty	8 Jul 202609:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Cloud Pak for Applications, is affected by a security bypass vulnerability (CVE-2026-5516)	8 Jun 202618:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty is affected by a security bypass vulnerability (CVE-2026-5516)	19 May 202616:42	–	ibm
ATTACKERKB	CVE-2026-5516	27 May 202613:00	–	attackerkb
Circl	CVE-2026-5516	19 May 202616:55	–	circl

NVD

Vulners

Node

ibm websphere_application_serverRange22.0.0.11–26.0.0.5liberty

[
  {
    "vendor": "IBM",
    "product": "WebSphere Application Server - Liberty",
    "versions": [
      {
        "status": "affected",
        "version": "22.0.0.11",
        "lessThanOrEqual": "26.0.0.5",
        "versionType": "semver"
      }
    ],
    "cpes": [
      "cpe:2.3:a:ibm:websphere_application_server___liberty:22.0.0.11:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:websphere_application_server___liberty:26.0.0.5:*:*:*:*:*:*:*"
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/pages/node/7273425

17 Jun 2026 10:59Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.14.4 - 5.9

EPSS0.00213

SSVC

CWE-362