EUVD-2026-51139

🗓️ 30 Jul 2026 14:09:23Reported by EUVDType

Liberty 17.0.0.3–26.0.0.8 vulnerable to cross site request forgery via collectiveController-1.0 with elevated server forgery.

Reporter	Title	Published	Views	Family All 20
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager.	9 Sep 202607:24	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM WebSphere Hybrid Edition, is affected by a cross-site request forgery (CVE-2026-14980, CVE-2026-2482)	4 Aug 202616:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SPSS Analytic Server is affected by multiple vulnerabilities in IBM WebSphere Application Server Liberty	27 Aug 202618:51	–	ibm
IBM Security Bulletins	Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in IBM WebSphere Application Server Liberty	27 Aug 202619:11	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in WebSphere Liberty profile(CVE-2026-14525, CVE-2026-16192, CVE-2026-10571, CVE-2026-14976, CVE-2026-15280, CVE-2026-18499, CVE-2026-14980, CVE-2026-2482, CVE-2026-14529, CVE-2026-10841) affect Power PowerVM Novalink	22 Sep 202619:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Cloud Pak for Applications, is affected by a cross-site request forgery (CVE-2026-14980, CVE-2026-2482)	4 Aug 202616:28	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of IBM WebSphere Application Server and IBM WebSphere Liberty, IBM Cloud Pak System is affected by multiple vulnerabilities	8 Sep 202616:23	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities may affect IBM WebSphere Liberty that is shipped with TXSeries for Multiplatforms.	21 Sep 202609:14	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities may affect IBM WebSphere Liberty that is shipped with IBM CICS TX Advanced.	16 Sep 202609:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty is affected by a cross-site request forgery (CVE-2026-14980, CVE-2026-2482)	11 Aug 202616:59	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "744dfa87-9b83-37ce-91c4-d094bba36f48",
        "vendor": {
          "name": "IBM"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "12b1b204-c13a-3679-932d-a81aa30caa62",
        "product": {
          "name": "WebSphere Application Server - Liberty",
          "vendor": {
            "name": "IBM"
          }
        },
        "product_version": "17.0.0.3 ≤26.0.0.8"
      }
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/pages/node/7281651

30 Jul 2026 17:37Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.18.3

EPSS0.0043

SSVC