Vulnerabilities

TI-2026-12609 CVE-2026-14976 · GHSA-9c23-pjxh-grqq

IBM WebSphere Application Server Liberty is affected by a remote code execution and path-segment injection vulnerability

MEDIUM 44

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by remote code execution with the collectiveController-1.0 feature enabled.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00613 Published 2026-07-28 No fix listed CWE-306

TI-2026-12857 CVE-2026-15280 · GHSA-w4jw-g5gv-m8gf

IBM WebSphere Application Server Liberty is affected by a remote code execution and path-segment injection vulnerability

LOW 39

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 ND Collective Controller is affected by a path-segment injection vulnerability in the collective routing mechanism.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00503 Published 2026-07-28 No fix listed CWE-22

Vulnerabilities

Filters

IBM WebSphere Application Server Liberty is affected by a remote code execution and path-segment injection vulnerability

IBM WebSphere Application Server Liberty is affected by a remote code execution and path-segment injection vulnerability