IBM WebSphere Liberty Vulnerabilities Allow Privilege Escalation

CERT-Bund has released a security advisory (WID-SEC-2026-0845) concerning multiple vulnerabilities in IBM WebSphere Application Server Liberty. These vulnerabilities, with a CVSS Base Score of 7.5, can be exploited by a remote, authenticated attacker to escalate privileges, bypass security measures, and disclose sensitive information. The advisory applies to Linux, MacOS X, UNIX, Windows, and other operating systems running affected versions of the product.

Organizations utilizing IBM WebSphere Application Server Liberty versions prior to 26.0.0.4 should review the advisory and implement available mitigations to address these security risks. The advisory highlights the potential for significant security breaches, including unauthorized access and data exposure, emphasizing the need for prompt patching or configuration adjustments to protect systems and data.