WebSphere Application Server - Liberty
- Software type
- Software application
- Total vulnerabilities (90 days)
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/08/2026, WebSphere Application Server - Liberty recorded 22 security vulnerabilities in the last 90 days, of which 10 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of WebSphere Application Server - Liberty and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-78636IBM WebSphere Application Server Liberty prior to 26.0.0.11 is affected by multiple vulnerabilitiesCVE-2026-11547IBM WebSphere Application Server Liberty prior to 26.0.0.11 is affected by multiple vulnerabilitiesCVE-2026-10844IBM WebSphere Application Server Liberty prior to 26.0.0.11 is affected by multiple vulnerabilitiesCVE-2026-108284IBM WebSphere Application Server Liberty prior to 26.0.0.11 is affected by multiple vulnerabilitiesCVE-2026-103320IBM WebSphere Application Server Liberty prior to 26.0.0.11 is affected by multiple vulnerabilities| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-78636IBM WebSphere Application Server Liberty prior to 26.0.0.11 is affected by multiple vulnerabilities | Exploitation statusNot confirmed | FixYes |
| SeverityMedium |
CVE-2026-11547IBM WebSphere Application Server Liberty prior to 26.0.0.11 is affected by multiple vulnerabilities | Exploitation statusNot confirmed | FixYes | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-10844IBM WebSphere Application Server Liberty prior to 26.0.0.11 is affected by multiple vulnerabilities | Exploitation statusNot confirmed | FixYes | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-108284IBM WebSphere Application Server Liberty prior to 26.0.0.11 is affected by multiple vulnerabilities | Exploitation statusNot confirmed | FixYes | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-103320IBM WebSphere Application Server Liberty prior to 26.0.0.11 is affected by multiple vulnerabilities | Exploitation statusNot confirmed | FixYes | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-95696IBM WebSphere Application Server Liberty Denial of Service | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityMedium |
|---|
CVE-2026-95695IBM WebSphere Application Server Liberty Incorrect Authorization | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityHigh |
|---|
CVE-2026-93909IBM WebSphere Application Server Liberty is affected by an authentication bypass | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityCritical |
|---|
CVE-2026-93905IBM WebSphere Application Server Liberty is affected by a deserialization of untrusted data | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityHigh |
|---|
CVE-2026-93895IBM WebSphere Application Server Liberty Improper Access Control | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityCritical |
|---|
CVE-2026-14532IBM WebSphere Application Server Liberty Integer Overflow | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityMedium |
|---|
CVE-2026-11713IBM WebSphere Application Server Liberty Incorrect Authorization | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityMedium |
|---|
CVE-2026-105443IBM WebSphere Application Server Liberty is affected by an improper access control | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityHigh |
|---|
CVE-2026-105442IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a deserialization of untrusted data | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityHigh |
|---|
CVE-2026-103499IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityHigh |
|---|
CVE-2026-101294IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a missing cryptographic step | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityHigh |
|---|
CVE-2026-11722IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty HTTP Request Smuggling | Exploitation statusNot exploited | FixYes | Published09/18/2026 | SeverityMedium |
|---|
CVE-2026-11549IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty Improper Access Control | Exploitation statusNot exploited | FixYes | Published09/18/2026 | SeverityMedium |
|---|
CVE-2026-11548IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty HTTP Request Smuggling | Exploitation statusNot exploited | FixYes | Published09/18/2026 | SeverityMedium |
|---|
CVE-2026-10841IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty HTTP Request Smuggling | Exploitation statusNot exploited | FixYes | Published09/18/2026 | SeverityMedium |
|---|
CVE-2026-14525IBM WebSphere Application Server Liberty is affected by an authenication bypass | Exploitation statusNot exploited | FixYes | Published08/13/2026 | SeverityCritical |
|---|
CVE-2026-10571IBM WebSphere Application Server Liberty is affected by a denial of service | Exploitation statusNot exploited | FixYes | Published08/13/2026 | SeverityMedium |
|---|
CVE-2026-18499IBM WebSphere Application Server Liberty is affected by a privilege escalation | Exploitation statusNot exploited | FixYes | Published08/12/2026 | SeverityHigh |
|---|
CVE-2026-8400Multiple Vulnerabilities in IBM® Java SDK affect IBM WebSphere Application Server and WebSphere Application Server Liberty due to the July 2026 CPU | Exploitation statusNot exploited | FixYes | Published08/05/2026 | SeverityHigh |
|---|
CVE-2026-9322IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities | Exploitation statusNot exploited | FixYes | Published07/30/2026 | SeverityHigh |
|---|
CVE-2026-14980IBM WebSphere Application Server Liberty is affected by a cross-site request forgery | Exploitation statusNot exploited | FixYes | Published07/30/2026 | SeverityHigh |
|---|
CVE-2026-11897IBM WebSphere Application Server Liberty is affected by a denial of service vulnerability with HTTP/2 | Exploitation statusNot exploited | FixYes | Published07/30/2026 | SeverityHigh |
|---|
CVE-2026-10842IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a security bypass vulnerability | Exploitation statusNot exploited | FixYes | Published07/30/2026 | SeverityHigh |
|---|
CVE-2026-2482IBM WebSphere Application Server Liberty is affected by a cross-site request forgery | Exploitation statusNot exploited | FixYes | Published07/29/2026 | SeverityLow |
|---|
CVE-2026-14529IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a server-side request forgery | Exploitation statusNot exploited | FixYes | Published07/29/2026 | SeverityCritical |
|---|
CVE-2026-16192IBM WebSphere Application Server Liberty is affected by a denial of service | Exploitation statusNot exploited | FixYes | Published07/28/2026 | SeverityHigh |
|---|
CVE-2026-15328IBM WebSphere Application Server and WebSphere Application Server Liberty is inconsistent Interpretation of HTTP Requests | Exploitation statusNot exploited | FixYes | Published07/28/2026 | SeverityHigh |
|---|
CVE-2026-15325IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities | Exploitation statusNot exploited | FixYes | Published07/28/2026 | SeverityHigh |
|---|
CVE-2026-15280IBM WebSphere Application Server Liberty is affected by a remote code execution and path-segment injection vulnerability | Exploitation statusNot exploited | FixYes | Published07/28/2026 | SeverityHigh |
|---|
CVE-2026-15064IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities | Exploitation statusNot exploited | FixYes | Published07/28/2026 | SeverityHigh |
|---|
CVE-2026-15057IBM WebSphere Application Server Liberty is affected by a denial of service vulnerability | Exploitation statusNot exploited | FixYes | Published07/28/2026 | SeverityHigh |
|---|
CVE-2026-14981IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities | Exploitation statusNot exploited | FixYes | Published07/28/2026 | SeverityHigh |
|---|
CVE-2026-14976IBM WebSphere Application Server Liberty is affected by a remote code execution and path-segment injection vulnerability | Exploitation statusNot exploited | FixYes | Published07/28/2026 | SeverityHigh |
|---|
CVE-2026-11806IBM WebSphere Application Server Liberty is affected by a an arbitrary file read vulnerability | Exploitation statusNot exploited | FixYes | Published06/30/2026 | SeverityHigh |
|---|
CVE-2026-11714IBM WebSphere Application Server Liberty is affected by an authorization bypass vulnerability | Exploitation statusNot exploited | FixYes | Published06/30/2026 | SeverityHigh |
|---|
CVE-2026-11546IBM WebSphere Application Server Liberty is affected by a server-side request forgery vulnerability | Exploitation statusNot exploited | FixYes | Published06/30/2026 | SeverityHigh |
|---|
CVE-2026-9320IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities | Exploitation statusNot exploited | FixYes | Published06/22/2026 | SeverityMedium |
|---|
CVE-2026-9071IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by Uncontrolled Resource Consumption | Exploitation statusNot exploited | FixYes | Published06/22/2026 | SeverityHigh |
|---|
CVE-2026-8646IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities | Exploitation statusNot exploited | FixYes | Published06/22/2026 | SeverityHigh |
|---|
CVE-2026-5516IBM WebSphere Application Server Liberty is affected by a security bypass vulnerability | Exploitation statusNot exploited | FixYes | Published05/27/2026 | SeverityMedium |
|---|
CVE-2026-4410IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service | Exploitation statusNot exploited | FixYes | Published05/27/2026 | SeverityMedium |
|---|
CVE-2026-3621IBM WebSphere Application Server Liberty is affected by identity spoofing | Exploitation statusNot exploited | FixYes | Published04/22/2026 | SeverityHigh |
|---|
CVE-2025-14917IBM WebSphere Application Server Liberty could provide weaker than expected security | Exploitation statusNot exploited | FixYes | Published03/25/2026 | SeverityMedium |
|---|
CVE-2025-14915IBM WebSphere Application Server Liberty is affected by a privilege escalation vulnerability | Exploitation statusNot exploited | FixYes | Published03/25/2026 | SeverityMedium |
|---|
CVE-2025-14923IBM WebSphere Application Server Liberty could provide weaker than expected security | Exploitation statusNot exploited | FixYes | Published03/03/2026 | SeverityMedium |
|---|
49 Results | Page 1 of 1