Man-in-the-Middle Vulnerability in IBM WebSphere Application Server
CVE-2026-77816

6.5MEDIUM

Key Information:

Vendor

IBM
Status
Websphere Application Server - Liberty
Vendor
CVE Published:
13 October 2026

What is CVE-2026-77816?

A man-in-the-middle vulnerability exists in IBM WebSphere Application Server - Liberty versions 17.0.0.3 to 26.0.0.9, allowing attackers to intercept communications between the administrative client and the server. This could lead to the unauthorized access of sensitive information, posing significant risks to data integrity and confidentiality. It is crucial for users of the affected versions to apply the latest patches to mitigate this risk.

Affected Version(s)

WebSphere Application Server - Liberty 17.0.0.3 <= 26.0.0.9

References

https://www.ibm.com/support/pages/node/7291394
vendor-advisorypatch

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.