Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| IBM | WebSphere Application Server - Liberty | affected |
|
No data.
No data.
OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.
No data.
No advisories yet.
Solution
IBM strongly recommends addressing the vulnerabilities now by applying the fix pack(s) listed below. For IBM WebSphere Application Server Liberty 17.0.0.3 - 26.0.0.10: · Apply Liberty Fix Pack 26.0.0.11 https://www.ibm.com/support/pages/node/7294658 (availability November 2026) or later fix pack.
Workaround
No workaround given by the vendor.
| Link | Providers |
|---|---|
| https://www.ibm.com/support/pages/node/7295268 |
|
Sun, 08 Nov 2026 17:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.10 could allow a remote attacker to conduct phishing attacks. | |
| Title | IBM WebSphere Application Server Liberty prior to 26.0.0.11 is affected by multiple vulnerabilities | |
| First Time appeared |
Ibm
Ibm websphere Application Server Liberty |
|
| Weaknesses | CWE-601 | |
| CPEs | cpe:2.3:a:ibm:websphere_application_server_liberty:17.0.0.3:*:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_application_server_liberty:26.0.0.10:*:*:*:*:*:*:* |
|
| Vendors & Products |
Ibm
Ibm websphere Application Server Liberty |
|
| References |
| |
| Metrics |
cvssV3_1
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: ibm
Published:
Updated: 2026-11-08T16:56:32.979Z
Reserved: 2026-06-04T11:55:28.143Z
Link: CVE-2026-10844
Vulnrichment
No data.
NVD
Status : Awaiting Analysis
Published: 2026-11-08T17:16:35.990
Modified: 2026-11-08T17:16:36.097
Link: CVE-2026-10844
Redhat
No data.
OpenCVE Enrichment
Updated: 2026-11-08T19:45:15Z