7.5
High
CVE-2026-3621 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.4 IBM WebSphere Application Server Liberty is…
Description
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.4 IBM WebSphere Application Server Liberty is vulnerable to identity spoofing under limited conditions when an application is deployed without authentication and authorization configured.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WebSphere Application Server - Liberty 17.0 | 17.0.0.3 → 26.0.0.4 | No fix stated |
Other CVEs of WebSphere Application Server - Liberty
The 56 CVEs of WebSphere Application Server - Liberty →
CVE-2026-11547
IBM WebSphere Application Server Liberty prior to 26.0.0.11 is affected by multiple vulnerabilities
4.3
Medium
CVE-2026-10844
IBM WebSphere Application Server Liberty prior to 26.0.0.11 is affected by multiple vulnerabilities
4.3
Medium
CVE-2026-108284
IBM WebSphere Application Server Liberty prior to 26.0.0.11 is affected by multiple vulnerabilities
6.5
Medium
CVE-2026-103320
IBM WebSphere Application Server Liberty prior to 26.0.0.11 is affected by multiple vulnerabilities
4.3
Medium