CVE-2026-5516 IBM WebSphere Application Server Liberty is affected by a security bypass vulnerability

🗓️ 27 May 2026 13:00:04Reported by ibmType

CVE-2026-5516 affects IBM WebSphere Liberty versions 22.0.0.11–26.0.0.5; remote attacker may bypass security via a timing window.

Reporter	Title	Published	Views	Family All 14
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM WebSphere Hybrid Edition, is affected by a security bypass vulnerability (CVE-2026-5516)	8 Jun 202618:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Enterprise Application Runtimes, is affected by a security bypass vulnerability (CVE-2026-5516)	8 Jun 202618:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Cloud Pak for Applications, is affected by a security bypass vulnerability (CVE-2026-5516)	8 Jun 202618:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty is affected by a security bypass vulnerability (CVE-2026-5516)	19 May 202616:42	–	ibm
ATTACKERKB	CVE-2026-5516	27 May 202613:00	–	attackerkb
Circl	CVE-2026-5516	19 May 202616:55	–	circl
CNNVD	IBM WebSphere Application Server Liberty 安全漏洞	27 May 202600:00	–	cnnvd
CVE	CVE-2026-5516	27 May 202613:00	–	cve
EUVD	EUVD-2026-32487	27 May 202613:00	–	euvd
NVD	CVE-2026-5516	27 May 202614:17	–	nvd

[
  {
    "vendor": "IBM",
    "product": "WebSphere Application Server - Liberty",
    "versions": [
      {
        "status": "affected",
        "version": "22.0.0.11",
        "lessThanOrEqual": "26.0.0.5",
        "versionType": "semver"
      }
    ],
    "cpes": [
      "cpe:2.3:a:ibm:websphere_application_server___liberty:22.0.0.11:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:websphere_application_server___liberty:26.0.0.5:*:*:*:*:*:*:*"
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/pages/node/7273425

27 May 2026 13:00Current

CVSS 3.14.4

EPSS0.00197