CVE-2026-14529

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 traditional is vulnerable to server-side request forgery SSRF when the SIP container feature sipServlet-1.1 is enabled...

CVE-2026-14529

creationtimestamp| type| source ---|---|--- 2026-07-29 18:48:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrslmntmrs2r 2026-07-30 04:47:07+00:00| seen| https://www.hkcert.org/security-bulletin/ibm-websphere-products-multiple-vulnerabilities20260730...

Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a server-side request forgery (CVE-2026-14529)

Summary IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a server-side request forgery vulnerability when sipServlet-1.1 is enabled. Vulnerability Details CVEID:CVE-2026-14529 DESCRIPTION: IBM WebSphere Application Server traditional and IBM WebSphere...