CVE-2026-11714

CRITICAL 9.8CVE-2026-11714 · Published 30/06/2026 · updated 25/10/2026

In short

CVE-2026-11714 is a CRITICAL (CVSS 9.8) vulnerability affecting websphere application server (ibm).
Chance of exploitation in the next 30 days (EPSS): 0.36%, higher than 30.4% of all vulnerabilities.
Fix: update to 26.0.0.8 or later.

Package	Affected versions	Patched versions
websphere application server ibm	`≥ 17.0.0.3, < 26.0.0.8`	`26.0.0.8`

IBM WebSphere Application Server Liberty is affected by a server-side request forgery vulnerability with the apiDiscovery-1.0 feature enabled.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

≥ 17.0.0.3, < 26.0.0.8

26.0.0.8

More vulnerabilities in websphere application server

See all →