PT-2026-95608 · Ibm · Ibm Websphere Application Server Liberty+1

CVE-2026-11549

·

Published

2026-09-18

·

Updated

2026-09-18

CVSS v3.1

6.5

Medium

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server (affected versions not specified) IBM WebSphere Application Server Liberty (affected versions not specified)
Description IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a virtual host bypass, which allows an attacker to circumvent the intended virtual host restrictions.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-11549

Affected Products

Ibm Websphere Application Server
Ibm Websphere Application Server Liberty