13743 matches found
CVE-2026-16674 IBM i is Affected By Multiple Vulnerabilities in WebSphere Application Server Liberty
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to an untrusted search path...
CVE-2026-16674
IBM i 7.3–7.6 are affected by CVE-2026-16674, enabling a remote authenticated attacker to execute arbitrary code due to an untrusted search path. The IBM bulletin lists affected releases and fixes: 7.6 SJ10874/SJ11023, 7.5 SJ10875/SJ11024, 7.4 SJ10876/SJ11025, 7.3 SJ10877/SJ11026. Remediation is ...
CVE-2026-14525
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 IBM WebSphere Application Server Liberty is vulnerable to an authentication bypass when the rtcomm-1.0 or rtcommGateway-1.0 feature is enabled...
CVE-2026-14525
IBM WebSphere Application Server Liberty (versions 17.0.0.3–26.0.0.8) is affected by an authentication bypass when the rtcomm-1.0 or rtcommGateway-1.0 feature is enabled. The underlying issue is CWE-306: Missing Authentication for Critical Function, with CVSS v3.1 base score 9.4 (Network attack, ...
CVE-2026-14525 IBM WebSphere Application Server Liberty is affected by an authenication bypass
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 IBM WebSphere Application Server Liberty is vulnerable to an authentication bypass when the rtcomm-1.0 or rtcommGateway-1.0 feature is enabled...
EUVD-2026-58362
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 IBM WebSphere Application Server Liberty is vulnerable to an authentication bypass when the rtcomm-1.0 or rtcommGateway-1.0 feature is enabled...
EUVD-2026-58359
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by a denial of service caused by insecure deserialization. A low-privileged, administrative user could exploit this vulnerability to consume system resources when the restConnector-2.0 feature is enabled...
CVE-2026-10571
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by a denial of service caused by insecure deserialization. A low-privileged, administrative user could exploit this vulnerability to consume system resources when the restConnector-2.0 feature is enabled...
CVE-2026-10571 IBM WebSphere Application Server Liberty is affected by a denial of service
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by a denial of service caused by insecure deserialization. A low-privileged, administrative user could exploit this vulnerability to consume system resources when the restConnector-2.0 feature is enabled...
CVE-2026-10571
CVE-2026-10571 affects IBM WebSphere Application Server Liberty versions 17.0.0.3 through 26.0.0.8. The vulnerability is a DoS due to insecure deserialization, exploitable by a low-privileged administrative user when the restConnector-2.0 feature is enabled. CVSS v3.1 base score is 5.7 (I: HIGH, ...
IBM WebSphere Application Server Liberty 17.0.0.3 < 26.0.0.9 DoS (7283485)
The version of IBM WebSphere Application Server Liberty running on the remote host is affected by a DoS vulnerability as referenced in the 7283485 advisory. - IBM WebSphere Application Server Liberty is affected by a denial of service caused by insecure deserialization. A low-privileged,...
IBM WebSphere Application Server Liberty 17.0.0.3 < 26.0.0.9 (7283488)
The version of IBM WebSphere Application Server Liberty running on the remote host is affected by a vulnerability as referenced in the 7283488 advisory. - IBM WebSphere Application Server Liberty is vulnerable to an authentication bypass when the rtcomm-1.0 or rtcommGateway-1.0 feature is enabled...
IBM WebSphere Application Server 9.x < 9.0.5.29 / Liberty 17.0.0.3 < 26.0.0.9 (7283567)
The version of IBM WebSphere Application Server running on the remote host is affected by multiple vulnerabilities as referenced in the 7283567 advisory. - An incomplete fix for CVE-2026-50645 means that it is still possible to perform a denial of service attack on Apache CXF by sending a message...
Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities due to Apache CXF (CVE-2026-57819, CVE-2026-54225, CVE-2026-64958)
Summary There are mulitple vulnerabilities in the Apache CXF library that affect IBM WebSphere Application Server and affect WebSphere Application Server Liberty when the jaxrs-2.0, jaxrs-2.1, jaxws-2.2, xmlWS-3.0, or xmlWS-4.0 features are enabled. Vulnerability Details CVEID:CVE-2026-57819...
Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in WebSphere Application Server Liberty
Summary IBM i is vulnerable to multiple vulnerabilities CVE-2026-16674, CVE-2026-18101, CVE-2026-18715 in WebSphere Application Server Liberty as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-18101 DESCRIPTION: IBM i could allow a local attacker to gain...
CVE-2026-18499
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to a privilege escalation when using Liberty collectives...
CVE-2026-18499
IBM WebSphere Application Server Liberty versions 17.0.0.3 through 26.0.0.8 are vulnerable to privilege escalation when using Liberty collectives. The issue is described as a privilege escalation mechanism affecting Liberty collectives, with CVSSv3.1 base score 8.1 (High) and privileges required:...
CVE-2026-18499 IBM WebSphere Application Server Liberty is affected by a privilege escalation
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to a privilege escalation when using Liberty collectives...