IBM WebSphere Application Server Liberty is affected by a privilege escalation

Description

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to a privilege escalation when using Liberty collectives.

Affected Products

Vendor	Product	Versions
ibm	websphere application server - liberty	17.0.0.3

References

https://www.ibm.com/support/pages/node/7283489(vendor-advisory, patch)

Related News (1 articles)

Tier C

VulDB5h ago

CVE-2026-18499 | IBM WebSphere Application Server up to 26.0.0.8 Liberty collectives privileges management

→ No new info (linked only)

CVSS 3.18.1 HIGH

VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

CISA KEV❌ No

Actively exploited❌ No

Patch available

https://www.ibm.com/support/pages/node/7283489

CWECWE-285

PublishedAug 12, 2026

Trending Score32

Source articles1

Independent1

Info Completeness0/14

Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

CRITICALCVE-2026-17218

IBM i is Affected By Remote Code Execution Vulnerability in Line Printer Daemon []

Trending: 56

CRITICALCVE-2026-16956

IBM Db2 Mirror for i is vulnerable to OS command injection []

Trending: 45

HIGHCVE-2026-16863

IBM i is Affected By Out-of-Bounds Read Vulnerability []

Trending: 38

HIGHCVE-2026-17248

IBM i is Affected By Multiple Vulnerabilities in the Debug Server

Trending: 38

HIGHCVE-2026-16907

IBM i is Affected By Multiple Vulnerabilities in the Debug Server

Trending: 38

Pin to Dashboard

Verification

State: unverified

Confidence: 0%

Vulnerability Timeline

CVE Published

Aug 12, 2026

Discovered by ZDM

Aug 12, 2026

Patch Available

Aug 12, 2026