CVE-2026-14529PATCHED

ibm · websphere_application_server

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a server-side request forgery

Description

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 traditional is vulnerable to server-side request forgery (SSRF) when the SIP container feature (sipServlet-1.1) is enabled.

Affected Products

Vendor	Product	Versions
ibm	websphere_application_server	9.0, 8.5, 17.0.0.3

References

https://www.ibm.com/support/pages/node/7281721(vendor-advisory, patch)

Related News (5 articles)

Tier B

CERT-FR3d ago

Multiples vulnérabilités dans les produits IBM (21 août 2026)

→ No new info (linked only)

Tier B

CERT-FR17d ago

Multiples vulnérabilités dans les produits IBM (07 août 2026)

→ No new info (linked only)

Tier B

CERT-FR24d ago

Multiples vulnérabilités dans les produits IBM (31 juillet 2026)

→ No new info (linked only)

Tier D

Heise Security24d ago

IBM WebSphere Application Server: Sicherheitsproblem in Admin-Konsole gelöst

→ No new info (linked only)

Tier C

VulDB25d ago

CVE-2026-14529 | IBM WebSphere Application Server SIP container feature server-side request forgery

→ No new info (linked only)

CVSS 3.19.4 CRITICAL

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

CISA KEV❌ No

Actively exploited❌ No

Patch available

https://www.ibm.com/support/pages/node/7281721

CWECWE-306

PublishedJul 29, 2026

Trending Score42

Source articles5

Independent3

Info Completeness0/14

Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

CRITICALCVE-2026-14446

IBM WebSphere Application Server is affected by a privilege escalation

Trending: 44

CRITICALCVE-2026-14512

IBM WebSphere Application Server is affected by an unsafe deserialization and exposure of sensitive information

Trending: 44

CRITICALCVE-2026-14525

IBM WebSphere Application Server Liberty is affected by an authenication bypass

Trending: 39

CRITICALCVE-2026-16894

Vulnerabilities in IBM AIX and PowerVM VIOS

Trending: 38

CRITICALCVE-2026-17118

Vulnerabilities in IBM AIX and PowerVM VIOS

Trending: 38

Pin to Dashboard

Verification

State: unverified

Confidence: 0%

Vulnerability Timeline

CVE Published

Jul 29, 2026

Discovered by ZDM

Jul 29, 2026

Patch Available

Jul 30, 2026