Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:websphere_application_server___liberty:26.0.0.6:*:*:*:*:*:*:*

part: a version: 26.0.0.6 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductWebsphere Application Server Liberty (f876fbab-6525-5c54-a2b8-7d977dcbdd44)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-9320 vulnerable 2026-07-29 01:09:06.995807 IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities
MEDIUM (5.9)
IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources.
Published: 2026-06-22T14:53:36.057Z
Updated: 2026-06-22T16:05:22.609Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-9071 vulnerable 2026-07-29 01:09:06.632468 IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by Uncontrolled Resource Consumption
HIGH (7.5)
IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources.
Published: 2026-06-22T14:47:39.502Z
Updated: 2026-06-23T13:39:22.340Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8646 vulnerable 2026-07-29 01:09:06.088014 IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities
HIGH (7.4)
IBM WebSphere Application Server 9.0 and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are vulnerable to HTTP request smuggling. A remote attacker could smuggle a specially crafted request to the application server thereby allowing the attacker to bypass security controls, spoof identity, escalate privilege, and expose sensitive information.
Published: 2026-06-22T14:44:42.460Z
Updated: 2026-06-24T03:56:09.798Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-11806 vulnerable 2026-07-29 00:23:31.646040 IBM WebSphere Application Server Liberty is affected by a an arbitrary file read vulnerability
HIGH (7.2)
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 is affected by an arbitrary file read vulnerability with the restConnector-2.0 feature enabled.
Published: 2026-06-30T19:43:17.946Z
Updated: 2026-07-02T03:56:00.900Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-11541 vulnerable 2026-07-29 00:23:31.402123 Inconsistent Interpretation of HTTP Requests in CICS Transaction Gateway for Multiplatforms.
HIGH (7.4)
IBM CICS Transaction Gateway for Multiplatforms 9.1, 9.2, 9.3, and 10.1 IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are affected by an HTTP request smuggling vulnerability.
Published: 2026-06-30T20:56:04.135Z
Updated: 2026-07-29T18:12:49.178Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.