Security Bulletin: IBM WebSphere Application Server Liberty is affected by an improper restriction of XML external entity vulnerability due to RESTEasy (CVE-2026-17615)

Summary There is a vulnerability in the RestEasy library that affects IBM WebSphere Application Server Liberty with restfulWS-3.0, restfulWS-3.1, or restfulWS-4.0 enabled. Vulnerability Details CVEID:CVE-2026-17615 DESCRIPTION: A flaw was found in RESTEasy's SourceProvider. This vulnerability...

CVE-2026-17615: Improper Restriction of XML External Entity Reference

A flaw was found in RESTEasy's SourceProvider. This vulnerability allows an unauthenticated attacker to perform an unauthenticated remote file read. By sending a specially crafted XML body with a DOCTYPE declaration referencing external entities to an endpoint that accepts application/xml and...

CVE-2026-17615: Improper Restriction of XML External Entity Reference

A flaw was found in RESTEasy's SourceProvider. This vulnerability allows an unauthenticated attacker to perform an unauthenticated remote file read. By sending a specially crafted XML body with a DOCTYPE declaration referencing external entities to an endpoint that accepts application/xml and...