#WebSphere
LightNews LightNews
stackflag.bsky.social
CVE-2026-101117 - websphere extreme scale
Versions 8.6.1.0 through 8.6.2.2 of IBM WebSphere Extreme Scale may let a remote user bypass security settings because the content‑security rules are not set correctly. This…

Too many irrelevant or confusing CVEs? Use stackflag.com

#ibm #CVE #infosec
CVE-2026-101117: IBM WebSphere Extreme Scale can let attackers run scripts
Versions 8.6.1.0 through 8.6.2.2 of IBM WebSphere Extreme Scale may let a remote user bypass security settings because the content‑security rules are not.
stackflag.com
November 8, 2026 at 4:30 PM
cve.skyfleet.blue
CVE-2026-101117 - IBM WebSphere eXtremes Scale Liberty deployment is affected by Cross Site Scripting(XSS) attacks.
CVE ID : CVE-2026-101117

Published : 8 novembre 2026 16:16 | 56 minutes ago

Description : IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.2.2 could allow a...
CVE-2026-101117 - IBM WebSphere eXtremes Scale Liberty deployment is affected by Cross Site Scripting(XSS) attacks.
IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.2.2 could allow a remote attacker to bypass security restrictions due to improper Content Security Policy configuration.
cvefeed.io
November 8, 2026 at 5:31 PM
thehackerwire.bsky.social
🔴 CVE-2026-101117 - Critical (9.1)

IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.2.2 could allow a remote attacker to bypass secur...

https://www.thehackerwire.com/vulnerability/CVE-2026-101117/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack
November 8, 2026 at 5:04 PM
threatroundup.bsky.social
Patch watch: CVE-2026-101117 (IBM WebSphere Extreme Scale, CVSS 9.1). IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.2.2 could allow a remote attacker to bypass security restrictions due… No public exploit reported yet. #CVE #infosec

threatroundup.com/cve/cve-2026...
November 8, 2026 at 10:37 PM
stemshop.bsky.social
🚨 CVE-2026-101117 — CVSS 9.1 CRITICAL

IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.2.2 could allow a remote attacker to bypass security restri...

🔎 https://stemshop.top/cve/CVE-2026-101117

#CVE #CyberSecurity #InfoSec
November 8, 2026 at 6:07 PM
euvd-bot.bsky.social
🚨 EUVD-2026-119692
📊 4.3/10
🏢 IBM

📝 IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.10 could allow a remote attacker to conduct phishing attacks.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119692

#cybersecurity #infosec #cve #euvd
November 8, 2026 at 6:03 PM
euvd-bot.bsky.social
🚨 EUVD-2026-119725
📊 4.3/10
🏢 IBM

📝 IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.10 is affected by an information disclosure vulnerability due to unsafe class reflection in...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119725

#cybersecurity #infosec #cve #euvd
November 8, 2026 at 11:01 PM
euvd-bot.bsky.social
🚨 EUVD-2026-119618
📊 9.1/10
🏢 IBM

📝 IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.2.2 could allow a remote attacker to bypass security restrictions due to improper Content Security Policy co...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119618

#cybersecurity #infosec #cve #euvd
November 8, 2026 at 5:01 PM
euvd-bot.bsky.social
🚨 EUVD-2026-119620
📊 4.3/10
🏢 IBM

📝 IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.10 could allow an authenticated user with the Reader role to obtain sensitive information.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119620

#cybersecurity #infosec #cve #euvd
November 8, 2026 at 5:01 PM
euvd-bot.bsky.social
🚨 EUVD-2026-119694
📊 6.5/10
🏢 IBM

📝 IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.10 could allow an authenticated user with the Reader role to obtain sensitive information.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119694

#cybersecurity #infosec #cve #euvd
November 8, 2026 at 6:03 PM
euvd-bot.bsky.social
🚨 EUVD-2026-119687
📊 4.3/10
🏢 IBM

📝 IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.10 is affected by a server-side request forgery vulnerability in the Admin Center deploy va...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119687

#cybersecurity #infosec #cve #euvd
November 8, 2026 at 6:03 PM
hugovalters.bsky.social
CVE-2026-11538: log injection in IBM WebSphere via crafted LTPA token cookies. CVSS 3.7, low severity. Patch still under review, so watch for updates. #CVE #infosec #IBM https://www.valtersit.com/cve/CVE-2026-11538/
November 3, 2026 at 4:50 PM
shermansheptacular.bsky.social
Im also worried about not being vetted do to me being new, at least in the babyfur websphere. T^T tho ive seen many people post about going to BFC even with super small followings and not many posts so ill hold out hope! Good luck I hope you get to go!
November 3, 2026 at 5:32 AM
hugovalters.bsky.social
CVE-2026-11545: missing authorization in IBM WebSphere 8.5/9.0 lets remote attackers pull sensitive info from the admin console. CVSS 3.7, patch status unknown. Harden access and watch for updates #CVE #infosec #IBM https://www.valtersit.com/cve/CVE-2026-11545/
November 2, 2026 at 8:00 AM
intelnightowl.bsky.social
IBM MQ impacted by denial‑of‑service vulnerability CVE‑2026‑11897, CVSS 7.5, affecting WebSphere Liberty. #IBM #MQ #CVE #WebSphereLiberty http://portal.auscert.org.au/bulletins/ESB-2026.13669/
AUSCERT Portal - ESB-2026.13669
portal.auscert.org.au
October 30, 2026 at 5:25 AM
euvd-bot.bsky.social
🚨 EUVD-2026-83281
📊 4.8/10
🏢 IBM

📝 IBM WebSphere Application Server 8.5 and 9.0 are affected by an HTTP request smuggling vulnerability.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-83281

#cybersecurity #infosec #cve #euvd
October 22, 2026 at 7:01 PM
euvd-bot.bsky.social
🚨 EUVD-2026-83290
📊 4.8/10
🏢 IBM

📝 IBM WebSphere Application Server 8.5 and 9.0 are affected by an HTTP request smuggling vulnerability.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-83290

#cybersecurity #infosec #cve #euvd
October 22, 2026 at 7:01 PM
euvd-bot.bsky.social
🚨 EUVD-2026-83286
📊 6.5/10
🏢 IBM

📝 IBM WebSphere Application Server 8.5 and 9.0 are affected by a virtual host bypass vulnerability.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-83286

#cybersecurity #infosec #cve #euvd
October 22, 2026 at 7:01 PM
euvd-bot.bsky.social
🚨 EUVD-2026-78060
📊 6.5/10
🏢 IBM

📝 IBM WebSphere Application Server 8.5 and 9.0 are vulnerable to HTTP request smuggling, caused by improper parsing of the HTTP transfer-encoding request header...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-78060

#cybersecurity #infosec #cve #euvd
October 22, 2026 at 7:01 PM
euvd-bot.bsky.social
🚨 EUVD-2026-78068
📊 6.5/10
🏢 IBM

📝 IBM WebSphere Application Server 8.5 and 9.0 are vulnerable to HTTP request smuggling, caused by improper parsing of the HTTP transfer-encoding request header...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-78068

#cybersecurity #infosec #cve #euvd
October 22, 2026 at 7:01 PM
euvd-bot.bsky.social
🚨 EUVD-2026-78067
📊 6.5/10
🏢 IBM

📝 IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-78067

#cybersecurity #infosec #cve #euvd
October 22, 2026 at 7:01 PM
neonotu.bsky.social
🟠 HOCH · IBM WebSphere Application Server und Liberty: mehrere Schwachstellen

CERT-Bund (BSI)
IBM WebSphere Application Server und Liberty: mehrere Schwachstellen
CERT-Bund (BSI) meldet mehrere Schwachstellen in IBM WebSphere Application Server und Liberty mit dem Schweregrad hoch. Die vollständige Beschreibung mit betroffenen Versionen und empfohlenen Maßnahm…
alerts.neonotu.com
October 15, 2026 at 5:08 AM
neonotu.bsky.social
🟠 HOCH · IBM WebSphere Application Server und Application Server Liberty: mehrere Schwachstellen

CERT-Bund (BSI)
IBM WebSphere Application Server und Application Server Liberty: mehrere Schwachstellen
CERT-Bund (BSI) meldet mehrere Schwachstellen in IBM WebSphere Application Server und Application Server Liberty mit dem Schweregrad hoch. Die vollständige Beschreibung mit betroffenen Versionen und …
alerts.neonotu.com
October 14, 2026 at 8:08 PM
stackflag.bsky.social
CVE-2026-93909 - websphere application server - liberty
Versions of IBM WebSphere Application Server Liberty from 17.0.0.3 up to 26.0.0.10 let users bypass login when the samlWeb-2.0 feature is turned on. An attacker…

Too many irrelevant or confusing CVEs? Use stackflag.com

#ibm #CVE #infosec
CVE-2026-93909: IBM WebSphere Liberty can be logged into without credentials
Versions of IBM WebSphere Application Server Liberty from 17.0.0.3 up to 26.0.0.10 let users bypass login when the samlWeb-2.0 feature is turned on.
stackflag.com
October 14, 2026 at 7:30 AM
stackflag.bsky.social
CVE-2026-93895 - websphere application server - liberty
Versions of IBM WebSphere Application Server Liberty from 20.0.0.12 through 26.0.0.10 may allow someone on the network who is not logged in to call gRPC services…

Too many irrelevant or confusing CVEs? Use stackflag.com

#ibm #CVE #infosec
CVE-2026-93895: IBM WebSphere Liberty lets remote attackers bypass gRPC controls
Versions of IBM WebSphere Application Server Liberty from 20.0.0.12 through 26.0.0.10 may allow someone on the network who is not logged in to call gRPC.
stackflag.com
October 14, 2026 at 7:30 AM