CVE-2026-2482 IBM WebSphere Application Server Liberty is affected by a cross-site request forgery

🗓️ 29 Jul 2026 18:19:36Reported by ibmType

Cross-site request forgery in IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.8 allows unauthorized actions.

Reporter	Title	Published	Views	Family All 24
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager.	9 Sep 202607:24	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities in IBM WebSphere Application Server Liberty affect IBM Sterling B2B Integrator and IBM Sterling File Gateway	22 Oct 202621:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM WebSphere Hybrid Edition, is affected by a cross-site request forgery (CVE-2026-14980, CVE-2026-2482)	4 Aug 202616:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Predict Component uses multiple dependencies which are vulnerable to multiple CVEs.	3 Nov 202610:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SPSS Analytic Server is affected by multiple vulnerabilities in IBM WebSphere Application Server Liberty	27 Aug 202618:51	–	ibm
IBM Security Bulletins	Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in IBM WebSphere Application Server Liberty	27 Aug 202619:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Controller Disclosure Management has addressed vulnerabilities	29 Oct 202614:46	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in WebSphere Liberty profile(CVE-2026-14525, CVE-2026-16192, CVE-2026-10571, CVE-2026-14976, CVE-2026-15280, CVE-2026-18499, CVE-2026-14980, CVE-2026-2482, CVE-2026-14529, CVE-2026-10841) affect Power PowerVM Novalink	22 Sep 202619:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Cloud Pak for Applications, is affected by a cross-site request forgery (CVE-2026-14980, CVE-2026-2482)	4 Aug 202616:28	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of IBM WebSphere Application Server and IBM WebSphere Liberty, IBM Cloud Pak System is affected by multiple vulnerabilities	8 Sep 202616:23	–	ibm

[
  {
    "vendor": "IBM",
    "product": "WebSphere Application Server - Liberty",
    "versions": [
      {
        "status": "affected",
        "version": "17.0.0.3",
        "lessThanOrEqual": "26.0.0.8",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/pages/node/7281651

29 Jul 2026 18:19Current

CVSS 3.13.1

EPSS0.00151

SSVC

CWE-352