Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2026-5516 | 5.9 medium | 0.00% | ibm, websphere_application_server | IBM WebSphere Application Server - Liberty 22.0.0.11 through 26.0.0.5 IBM WebSphere Application Server Liberty could allow a remote attacker to bypass security under limited conditions by exploiting a specific timing window. | Mon 26 Oct |
| CVE-2026-79715 | 5.5 medium | 0.00% | no CPE yet | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a local attacker to traverse directories on the system. An attacker could use a specially crafted application archive to write files outside the intended directory. | 16 Oct |
| CVE-2026-11383 | 5.4 medium | 0.00% | ibm, websphere_application_server, tivoli_system_automation_application_manager | IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server is affected by cross-site scripting in the Administrative Console. | Fri 23 Oct |
| CVE-2026-11713 | 5.4 medium | 0.00% | no CPE yet | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 is affected by a privilege escalation vulnerability with the restConnector-2.0 feature enabled. | 17 Oct |
| CVE-2025-36099 | 4.9 medium | 0.00% | ibm, websphere_application_server | IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to a denial of service, caused by sending a specially-crafted request. A privileged user could exploit this vulnerability to cause the server to consume memory resources. | 9 Oct |
| CVE-2026-11548 | 4.8 medium | 0.00% | no CPE yet | IBM WebSphere Application Server 8.5 and 9.0, and and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 are affected by an HTTP request smuggling vulnerability. | Thu 22 Oct |
| CVE-2026-11722 | 4.8 medium | 0.00% | no CPE yet | IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 are affected by an HTTP request smuggling vulnerability. | Thu 22 Oct |
| CVE-2026-10841 | 4.8 medium | 0.00% | no CPE yet | IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 are vulnerable to HTTP request smuggling. | Thu 22 Oct |
| CVE-2026-14532 | 4.3 medium | 0.00% | no CPE yet | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a Reader-role attacker to obtain version information that causes an uncaught exception. | 14 Oct |
59 of 59 · Previous
Download these 59 as CSV · subscribe to this list.
EPSS scores: 2026-10-28. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.