What’s Vulnerable › Vulnerabilities
CVE-2026-5516: IBM WebSphere Application Server Liberty is affected by a security bypass vulnerability
- Severity: medium (CVSS 5.9 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-05-27 · updated 2026-10-26
- Weakness: CWE-362
Description
IBM WebSphere Application Server - Liberty 22.0.0.11 through 26.0.0.5 IBM WebSphere Application Server Liberty could allow a remote attacker to bypass security under limited conditions by exploiting a specific timing window.
Affected products
- IBM WebSphere Application Server: from 22.0.0.11 through 26.0.0.5
References
Get alerted when CVE-2026-5516 or the next vulnerability affects your stack