CVE-2026-2482
LowCVSS 3.1Exploitation Probability (EPSS)
Low risk0th percentile - higher than 0% of all known CVEs
Summary
IBM WebSphere Application Server Liberty versions 17.0.0.3 through 26.0.0.8 are vulnerable to Cross-Site Request Forgery (CSRF), allowing an attacker to execute unauthorized actions on behalf of a trusted user.
Risk Assessment
An attacker can exploit user trust to perform unwanted operations, such as configuration changes or data theft, without the victim's knowledge.
Recommendation
Apply security patches from IBM for WebSphere Application Server Liberty or implement CSRF protection mechanisms like synchronizer tokens.
Original NVD description (English source)
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.