CVE-2026-3621

HIGH CVSS 7.5 View on NVD ↗

Description

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.4 IBM WebSphere Application Server Liberty is vulnerable to identity spoofing under limited conditions when an application is deployed without authentication and authorization configured.

CVSS Vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

References

https://www.ibm.com/support/pages/node/7270437

Published: Apr 23, 2026 00:16 UTC Modified: Apr 23, 2026 00:16 UTC