PT-2026-27496 · Ibm · Ibm Websphere Application Server Liberty

Published 2026-03-24 · Updated 2026-03-25 · CVE-2026-1561

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server Liberty versions 17.0.0.3 through 26.0.0.3

Description IBM WebSphere Application Server Liberty is susceptible to server-side request forgery (SSRF). This condition could enable a remote attacker to submit unauthorized requests from the system. Successful exploitation may lead to network enumeration or enable further attacks. The vulnerability involves the ability to make requests from the server itself, potentially accessing internal resources or external systems on behalf of the attacker.

Recommendations Update IBM WebSphere Application Server Liberty to a version beyond 26.0.0.3.

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2026-1561

Affected Products

Ibm Websphere Application Server Liberty

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-1561 · Security Note
• https://twitter.com/knaepp/status/2036463071862849685 · Twitter Post
• https://twitter.com/CVEnew/status/2036911791859724488 · Twitter Post
• https://ibm.com/support/pages/node/7267347 · Patch, Vendor Advisory