CVE-2026-2482

LOW

IBM WebSphere Application Server Liberty is affected by a cross-site request forgery

Title source: cna

Description

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

References (1)

Core 1

Core References

Vendor Advisory vendor-advisory patch

https://www.ibm.com/support/pages/node/7281651

Scores

CVSS v3 3.1

EPSS 0.0009

EPSS Percentile 0.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-352

Status published

Products (1)

IBM/WebSphere Application Server - Liberty 17.0.0.3 - 26.0.0.8

Published Jul 29, 2026

Tracked Since Jul 30, 2026