EUVD-2026-40399

🗓️ 30 Jun 2026 19:51:21Reported by EUVDType

Server-side request forgery hits WebSphere Liberty 17.0.0.3–26.0.0.7 with adminCenter-1.0.

Reporter	Title	Published	Views	Family All 13
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Enterprise Application Runtimes, is affected by a server-side request forgery vulnerability (CVE-2026-11546)	7 Jul 202619:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM WebSphere Hybrid Edition, is affected by a server-side request forgery vulnerability (CVE-2026-11546)	7 Jul 202619:33	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in IBM WebSphere Application (CVE-2026-50645, CVE-2026-9322, CVE-2026-11541, CVE-2026-4410, CVE-2026-9320, CVE-2026-8646, CVE-2026-11806, CVE-2026-9071, CVE-2026-11546, CVE-2026-5516) affects IBM PowerVM Novalink.	16 Jul 202615:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Cloud Pak for Applications, is affected by a server-side request forgery vulnerability (CVE-2026-11546)	7 Jul 202619:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty is affected by a server-side request forgery vulnerability (CVE-2026-11546)	14 Jul 202601:02	–	ibm
ATTACKERKB	CVE-2026-11546	30 Jun 202619:51	–	attackerkb
Circl	CVE-2026-11546	2 Jul 202608:28	–	circl
CVE	CVE-2026-11546	30 Jun 202619:51	–	cve
Cvelist	CVE-2026-11546 IBM WebSphere Application Server Liberty is affected by a server-side request forgery vulnerability	30 Jun 202619:51	–	cvelist
NVD	CVE-2026-11546	30 Jun 202620:17	–	nvd

[
  {
    "enisaIdVendor": [
      {
        "id": "0f6aea37-660e-37da-942f-f0fa0831f975",
        "vendor": {
          "name": "IBM"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "a146636f-c2c0-3748-b02a-74c6850a8bee",
        "product": {
          "name": "WebSphere Application Server - Liberty",
          "vendor": {
            "name": "IBM"
          }
        },
        "product_version": "17.0.0.3 ≤26.0.0.7"
      }
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/pages/node/7278572

30 Jun 2026 19:51Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.17.1

EPSS0.00222