CVE-2026-1561

published 2026-03-25

CVE-2026-1561: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application Server Liberty is vulnerable to server-side request forgery…

medium 5.4 CVSS 3.1

AV N AC L PR L UI N S U C L I L A N

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application Server Liberty is vulnerable to server-side request forgery (SSRF). This may allow remote attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
ibm	websphere_application_server	>= 17.0.0.3 < 26.0.0.4	26.0.0.4
ibm	websphere_application_server_liberty	17.0.0.3 – 26.0.0.3	—

CWE-918