CVE-2026-14532: IBM WebSphere Application Server Liberty Integer Overflow
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a Reader-role attacker to obtain version information that causes an uncaught exception.
Other sources
IBM WebSphere Application Server Liberty could allow a Reader-role attacker to obtain version information that causes an uncaught exception.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM WebSphere Application Server Libertyto a version that resolves this vulnerability.Fixed in 26.0.0.10
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker needs Reader-role access to IBM WebSphere Application Server Liberty. The issue is remotely reachable and does not require user interaction.
What is the impact of successful exploitation?
A Reader-role attacker can obtain version information that triggers an uncaught exception. The provided severity vector indicates low confidentiality impact and no stated integrity or availability impact.
Which Liberty releases are affected?
IBM WebSphere Application Server Liberty versions 17.0.0.3 through 26.0.0.9 are affected.