CVE-2026-95695 is a high-severity vulnerability in IBM WebSphere Application Server - Liberty versions 20.0.0.12 through 26.0.0.10. It involves incorrect authorization that could allow a remote attacker to bypass security restrictions without authentication. The vulnerability impacts confidentiality and integrity but does not affect availability. No known exploits are reported in the wild. No patch or remediation details are provided in the available data.
CVE-2026-101294 is a high-severity vulnerability in IBM WebSphere Application Server - Liberty and IBM WebSphere Application Server versions 8.5 and 9.0. It involves a missing cryptographic step that allows a remote attacker to bypass cryptographic signature verification due to improper verification of the cryptographic signature. This flaw affects versions 17.0.0.3 through 26.0.0.10 of WebSphere Application Server - Liberty and versions 8.5 and 9.0 of WebSphere Application Server. The vulnerability has a CVSS 3.1 score of 8.7, indicating a high impact on confidentiality and integrity without requiring privileges or user interaction. No patch or remediation information is provided in the available data.
CVE-2026-105442 is a high-severity vulnerability in IBM WebSphere Application Server versions 8.5, 9.0, and Liberty editions from 17.0.0.3 through 26.0.0.10. It involves insecure deserialization of untrusted data in the messaging service, which could allow a remote attacker to cause a denial of service. The vulnerability does not impact confidentiality or integrity but affects availability.
IBM WebSphere Application Server - Liberty versions 17.0.0.3 through 26.0.0.10 suffer from insufficient isolation between servers sharing the same installation. This improper access control vulnerability can lead to high impact on confidentiality and integrity without user interaction. The vulnerability is tracked as CVE-2026-105443 and has a CVSS 3.1 score of 8.2, indicating high severity.
IBM WebSphere Application Server - Liberty versions 17.0.0.3 through 26.0.0.9 are affected by a privilege escalation vulnerability when the restConnector-2.0 feature is enabled. This vulnerability involves incorrect authorization, potentially allowing users with limited privileges to escalate their access rights. The CVSS v3.1 base score is 5.4, indicating a medium severity issue.
IBM WebSphere Application Server - Liberty versions 17.0.0.3 through 26.0.0.9 contain an information disclosure vulnerability (CWE-209) that allows an authenticated attacker to obtain sensitive information when the restConnector-2.0 feature is enabled. The vulnerability involves generation of error messages that expose sensitive data. The CVSS 3.1 base score is 6.5, indicating a medium severity issue.
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 Liberty could allow a remote unauthenticated attacker to cause a denial of service due to uncontrolled resource consumption.
IBM WebSphere Application Server - Liberty versions 17.0.0.3 through 26.0.0.8 are affected by an authentication bypass vulnerability when the rtcomm-1.0 or rtcommGateway-1.0 feature is enabled. This vulnerability allows unauthenticated attackers to access critical functions without proper authentication.
IBM WebSphere Application Server - Liberty versions 17.0.0.3 through 26.0.0.8 contain a vulnerability involving insecure deserialization that can be exploited by a low-privileged administrative user to cause a denial of service when the restConnector-2.0 feature is enabled. This vulnerability does not impact confidentiality or integrity but can disrupt availability by consuming system resources.
IBM WebSphere Application Server versions 8.5, 9.0, and Liberty versions 17.0.0.3 through 26.0.0.7 have a vulnerability that could allow a remote attacker to bypass security constraints. This issue affects both Traditional and Liberty editions. The vulnerability is classified under CWE-289, indicating improper authentication. No specific patch or remediation information is provided in the available data.
CVE-2026-9322 is a high-severity vulnerability in IBM WebSphere Application Server versions 9.0, 8.5, and Liberty releases from 17.0.0.3 through 26.0.0.7. It allows denial of service (DoS) via crafted HTTP requests that cause uncontrolled resource consumption.