CVE Catalog
CVE-2026-14525
CriticalCVSS 9.4Summary
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 IBM WebSphere Application Server Liberty is vulnerable to an authentication bypass when the rtcomm-1.0 or rtcommGateway-1.0 feature is enabled.
Risk Assessment
The risk includes unauthorized access to applications and data, potentially leading to confidentiality and integrity breaches.
Recommendation
It is recommended to update IBM WebSphere Application Server Liberty to a patched version and consider disabling the rtcomm-1.0 and rtcommGateway-1.0 features if not essential.
Original NVD description (English source)
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 IBM WebSphere Application Server Liberty is vulnerable to an authentication bypass when the rtcomm-1.0 or rtcommGateway-1.0 feature is enabled.