CVE-2026-14529

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 traditional is vulnerable to server-side request forgery SSRF when the SIP container feature sipServlet-1.1 is enabled...

CVE-2026-14529

IBM WebSphere Application Server (traditional 9.0 and 8.5) and WebSphere Application Server Liberty 17.0.0.3–26.0.0.8 are affected by SSRF when the SIP container feature sipServlet-1.1 is enabled. The vulnerability (CVE-2026-14529) is CVSSv3.1 base score 9.4 (CRITICAL) with an attack vector of NE...