CVE-2026-95696: IBM WebSphere Application Server Liberty Denial of Service
IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to cause a denial of service due to an uncaught exception.
Other sources
WebSphere Application Server - Liberty could allow a remote attacker to cause a denial of service due to an uncaught exception.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM WebSphere Application Server Libertyto a version that resolves this vulnerability.Fixed in 26.0.0.11Patch DT502929
Event History
Frequently Asked Questions
Who can exploit this issue?
A remote attacker can exploit it over the network. The supplied vector indicates no privileges or user interaction are required, provided the attacker can reach the affected Liberty service.
Which Liberty versions are affected?
IBM WebSphere Application Server Liberty versions 20.0.0.12 through 26.0.0.10 are identified as affected.
What is the likely impact of successful exploitation?
Successful exploitation can cause a denial of service through an uncaught exception. The provided severity vector also indicates limited confidentiality impact, but no integrity impact.