PT-2026-140134

CVE-2026-78636

·

Published

2026-11-08

·

Updated

2026-11-08

Description by

CVSS 3.1
4.3
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.10 is affected by an information disclosure vulnerability due to unsafe class reflection in the JMX REST connector body parser.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
CWE-470: Use of Externally-Controlled Input to Select Classes or Code (\'Unsafe Reflection\')
Related identifiers
CVE-2026-78636
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com