What is the CVSS score of EUVD-2026-57322?

EUVD-2026-57322 has a CVSS 3.1 base score of 8.1 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N. EPSS exploitation probability: 0.3%.

Which versions of WebSphere Liberty are affected by EUVD-2026-57322?

A privilege escalation vulnerability in IBM WebSphere Application Server - Liberty (versions 17.0.0.3-26.0.0.8) allows employees or compromised internal accounts to gain unauthorized access to…. A patch is available.

How to fix or mitigate EUVD-2026-57322?

Within 24 hours, inventory all IBM WebSphere Liberty deployments running versions 17.0.0.3 through 26.0.0.8, with particular focus on systems with the Liberty collectives feature enabled. Within 7 days, apply the vendor-released patch to all affected systems, prioritizing production environments. Within 30 days, complete post-patch validation testing and review system access logs for evidence of unauthorized privilege escalation during the exposure window.

WebSphere Liberty EUVD-2026-57322

| CVE-2026-18499 HIGH

Improper Authorization (CWE-285)

2026-08-12 ibm

GHSA-fg2c-rf98-x93f

Authentication Bypass Privilege Escalation IBM Websphere Application Server Liberty

8.1

CVSS 3.1 · Vendor: ibm

Severity by source

Vendor (ibm) PRIMARY

8.1 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

vuln.today AI

8.1 HIGH

Network-exploitable via collective management plane; low privilege required for authenticated collective access; no availability impact from privilege escalation alone.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (ibm).

CVSS VectorVendor: ibm

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Lifecycle Timeline

Analysis Generated

Aug 12, 2026 - 17:07 vuln.today

CVE Published

Aug 12, 2026 - 16:25 cve.org

HIGH 8.1

DescriptionCVE.org

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to a privilege escalation when using Liberty collectives.

AnalysisAI

Privilege escalation in IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 allows an authenticated low-privileged user to gain unauthorized access to protected data and functionality when the Liberty collectives feature is in use. The CVSS vector (AV:N/AC:L/PR:L/UI:N) confirms network-exploitable, low-complexity exploitation requiring only low-level authentication with no user interaction - resulting in high confidentiality and integrity impact. No public exploit or CISA KEV listing has been identified at time of analysis; a vendor-released patch is available.

Technical ContextAI

IBM WebSphere Application Server - Liberty is a lightweight, modular Java EE/Jakarta EE application server. Liberty Collectives is a management feature that enables a controller server to administer a group of member servers as a logical unit, sharing configuration and operational state across the collective. The root cause is CWE-285 (Improper Authorization): the authorization logic within the collective management plane fails to correctly enforce privilege boundaries, potentially allowing a user operating at one privilege level to invoke operations or access data reserved for higher-privilege roles. The affected CPE is cpe:2.3:a:ibm:websphere_application_server_-_liberty:*:*:*:*:*:*:*:* spanning versions 17.0.0.3 through 26.0.0.8. The Authentication Bypass tag alongside Privilege Escalation suggests the flaw may allow an authenticated identity to bypass role-based checks rather than circumvent initial login, consistent with CWE-285.

RemediationAI

Apply the vendor-released patch per IBM Security Bulletin at https://www.ibm.com/support/pages/node/7283489. The exact fixed version number is not specified in the available intelligence and should be confirmed directly from that advisory before upgrading. As a compensating control where immediate patching is not feasible, disable or deconfigure Liberty collectives on affected instances to eliminate the vulnerable attack surface - note this will remove collective management capabilities and may require alternative server management workflows. Restrict network access to collective controller endpoints using firewall rules to limit exposure to trusted management networks only; this reduces but does not eliminate risk from insider or lateral-movement scenarios. Audit existing collective member authentication grants and remove any accounts with broader-than-necessary access.