Login Request a demo
WA
Product
WebSphere Application Server - Liberty
by IBM · last CVE Oct 13, 2026
52
CVEs
0
On KEV
9.8
Max CVSS
14
New 30D
Vulnerabilities52In the news0Timeline
Severity mix
Critical 13High 23Medium 16Low 0
Severity
All severities52Critical13High23Medium16Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add WebSphere Application Server - Liberty to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-14909
6.5
0%
Oct 13
IBM WebSphere Application Server Liberty Information Disclosure
Affected: 17.0.0.3 through 26.0.0.9
CVE-2026-77816
6.5
0%
Oct 13
IBM WebSphere Application Server Liberty Improper Certificate Validation
Affected: 17.0.0.3 through 26.0.0.9
CVE-2026-11549
6.5
0%
Sep 18
IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty Improper Access Control
Affected: 17.0.0.3 through 26.0.0.5
CVE-2026-15396
6.5
0%
Sep 14
IBM WebSphere Application Server IBM WebSphere Application Server - Liberty HTTP Request Smuggling
Affected: 17.0.0.3 through 26.0.0.5
CVE-2026-15412
6.5
0%
Sep 14
IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty Open Redirect
Affected: 17.0.0.3 through 26.0.0.5
CVE-2026-15634
6.5
0%
Sep 14
IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty Request Smuggling
Affected: 17.0.0.3 through 26.0.0.5
CVE-2026-16192
6.5
0%
Jul 28
IBM WebSphere Application Server Liberty is affected by a denial of service
Affected: 17.0.0.3 through 26.0.0.8
CVE-2026-5516
5.9
0%
May 27
IBM WebSphere Application Server Liberty is affected by a security bypass vulnerability
Affected: 22.0.0.11 through 26.0.0.5
CVE-2026-3621
5.9
0%
Apr 22
IBM WebSphere Application Server Liberty is affected by identity spoofing
Affected: 17.0.0.3 through 26.0.0.4
CVE-2026-79715
5.5
0%
Oct 13
IBM WebSphere Application Server Liberty Path Traversal
Affected: 17.0.0.3 through 26.0.0.9
CVE-2026-11713
5.4
0%
Oct 13
IBM WebSphere Application Server Liberty Incorrect Authorization
Affected: 17.0.0.3 through 26.0.0.9
CVE-2026-10571
5.3
1%
Aug 13
IBM WebSphere Application Server Liberty is affected by a denial of service
Affected: 17.0.0.3 through 26.0.0.8
CVE-2026-11722
4.8
0%
Sep 18
IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty HTTP Request Smuggling
Affected: 17.0.0.3 through 26.0.0.5
CVE-2026-11548
4.8
0%
Sep 18
IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty HTTP Request Smuggling
Affected: 17.0.0.3 through 26.0.0.5
CVE-2026-10841
4.8
0%
Sep 18
IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty HTTP Request Smuggling
Affected: 17.0.0.3 through 26.0.0.5
CVE-2026-14532
4.3
0%
Oct 13
IBM WebSphere Application Server Liberty Integer Overflow
Affected: 17.0.0.3 through 26.0.0.9
Showing 16