PT-2026-27496 · Ibm · Ibm Websphere Application Server Liberty

CVE-2026-1561 · Publicado 2026-03-24 · Atualizado 2026-03-25

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server Liberty versions 17.0.0.3 through 26.0.0.3

Description IBM WebSphere Application Server Liberty is susceptible to server-side request forgery (SSRF). This condition could enable a remote attacker to submit unauthorized requests from the system. Successful exploitation may lead to network enumeration or enable further attacks. The vulnerability involves the ability to make requests from the server itself, potentially accessing internal resources or external systems on behalf of the attacker.

Recommendations Update IBM WebSphere Application Server Liberty to a version beyond 26.0.0.3.

Correção

SSRF

Enumeração de Fraquezas

CWE-918

Identificadores relacionados

CVE-2026-1561

Produtos afetados

Ibm Websphere Application Server Liberty

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-1561 · Nota de Segurança
• https://twitter.com/knaepp/status/2036463071862849685 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2036911791859724488 · Publicação no Twitter
• https://ibm.com/support/pages/node/7267347 · Correção, Aviso do Fabricante