EUVD-2026-40394

🗓️ 30 Jun 2026 19:43:17Reported by EUVDType

Arbitrary file read on IBM WebSphere Liberty with restConnector-2.0 enabled (17.0.0.3–26.0.0.6).

Reporter	Title	Published	Views	Family All 14
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty is affected by a an arbitrary file read vulnerability (CVE-2026-11806)	23 Jun 202613:21	–	ibm
IBM Security Bulletins	Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in IBM WebSphere Application Server Liberty	16 Jul 202616:29	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM WebSphere Hybrid Edition, is affected by an arbitrary file read vulnerability (CVE-2026-11806)	6 Jul 202621:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Enterprise Application Runtimes, is affected by a an arbitrary file read vulnerability (CVE-2026-11806)	6 Jul 202621:27	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in IBM WebSphere Application (CVE-2026-50645, CVE-2026-9322, CVE-2026-11541, CVE-2026-4410, CVE-2026-9320, CVE-2026-8646, CVE-2026-11806, CVE-2026-9071, CVE-2026-11546, CVE-2026-5516) affects IBM PowerVM Novalink.	16 Jul 202615:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Cloud Pak for Applications, is affected by an arbitrary file read vulnerability (CVE-2026-11806)	7 Jul 202619:30	–	ibm
ATTACKERKB	CVE-2026-11806	30 Jun 202619:43	–	attackerkb
Circl	CVE-2026-11806	2 Jul 202601:31	–	circl
CVE	CVE-2026-11806	30 Jun 202619:43	–	cve
Cvelist	CVE-2026-11806 IBM WebSphere Application Server Liberty is affected by a an arbitrary file read vulnerability	30 Jun 202619:43	–	cvelist

[
  {
    "enisaIdVendor": [
      {
        "id": "1b583c09-d42c-33ca-bf84-eddf11b09daf",
        "vendor": {
          "name": "IBM"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "861c93c1-6d96-3bd1-94cf-add9c0ebb8b8",
        "product": {
          "name": "WebSphere Application Server - Liberty",
          "vendor": {
            "name": "IBM"
          }
        },
        "product_version": "17.0.0.3 ≤26.0.0.6"
      }
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/pages/node/7277536

30 Jun 2026 19:43Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.17.2

EPSS0.00472