EUVD-2026-51139

🗓️ 30 Jul 2026 14:09:23Reported by EUVDType

Liberty 17.0.0.3–26.0.0.8 vulnerable to cross site request forgery via collectiveController-1.0 with elevated server forgery.

Reporter	Title	Published	Views	Family All 15
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM WebSphere Hybrid Edition, is affected by a cross-site request forgery (CVE-2026-14980, CVE-2026-2482)	4 Aug 202616:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SPSS Analytic Server is affected by multiple vulnerabilities in IBM WebSphere Application Server Liberty	27 Aug 202618:51	–	ibm
IBM Security Bulletins	Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in IBM WebSphere Application Server Liberty	27 Aug 202619:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Cloud Pak for Applications, is affected by a cross-site request forgery (CVE-2026-14980, CVE-2026-2482)	4 Aug 202616:28	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of IBM WebSphere Application Server and IBM WebSphere Liberty, IBM Cloud Pak System is affected by multiple vulnerabilities	8 Sep 202616:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty is affected by a cross-site request forgery (CVE-2026-14980, CVE-2026-2482)	11 Aug 202616:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Engineering Lifecycle Management products using IBM WebSphere Application Server Liberty is affected by a cross-site request forgery (CVE-2026-14980, CVE-2026-2482)	25 Aug 202617:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Enterprise Application Runtimes, is affected by a cross-site request forgery (CVE-2026-14980, CVE-2026-2482)	4 Aug 202616:28	–	ibm
ATTACKERKB	CVE-2026-14980	30 Jul 202614:09	–	attackerkb
Circl	CVE-2026-14980	30 Jul 202604:50	–	circl

[
  {
    "enisaIdVendor": [
      {
        "id": "744dfa87-9b83-37ce-91c4-d094bba36f48",
        "vendor": {
          "name": "IBM"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "12b1b204-c13a-3679-932d-a81aa30caa62",
        "product": {
          "name": "WebSphere Application Server - Liberty",
          "vendor": {
            "name": "IBM"
          }
        },
        "product_version": "17.0.0.3 ≤26.0.0.8"
      }
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/pages/node/7281651

30 Jul 2026 17:37Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.18.3

EPSS0.0024

SSVC