CVE Catalog
CVE-2026-18499
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk0.27%
19th percentile - higher than 19% of all known CVEs
Summary
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to a privilege escalation when using Liberty collectives.
Risk Assessment
The risk for the organization is the possibility of privilege escalation by an attacker, which can lead to unauthorized access to applications and data.
Recommendation
It is recommended to upgrade IBM WebSphere Application Server - Liberty to the latest available version and apply security patches from IBM.
Original NVD description (English source)
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to a privilege escalation when using Liberty collectives.