CVE-2026-2482 is a Cross-Site Request Forgery (CWE-352) vulnerability affecting IBM WebSphere Application Server - Liberty version 17.0.0.3. The vulnerability allows an attacker to induce a user to perform unwanted actions on a web application in which the user is authenticated. The CVSS 3.1 base score is 3.1, with network attack vector, high attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality or availability impact, and low integrity impact. No vendor advisory or patch information is currently available, and no known exploits are reported in the wild.

An attacker could exploit this vulnerability to cause a user to unknowingly perform actions that the user is authorized to do on the IBM WebSphere Application Server - Liberty instance. The impact is limited to integrity with no confidentiality or availability effects. The low CVSS score reflects the requirement for user interaction and high attack complexity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix or mitigation is provided by IBM, users should consider implementing standard CSRF protections such as anti-CSRF tokens or same-site cookies where applicable. Monitor IBM advisories for updates.