Skip to main content

WebSphere Liberty EUVDEUVD-2026-58362

| CVE-2026-14525 CRITICAL
Missing Authentication for Critical Function (CWE-306)
2026-08-13 ibm GHSA-fpr6-jmjm-9r5g
Authentication Bypass IBM Websphere Application Server Liberty
9.4
CVSS 3.1 · Vendor: ibm
Share

Severity by source

Vendor (ibm) PRIMARY
9.4 CRITICAL
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
vuln.today AI
9.4 CRITICAL

Missing authentication on a network-reachable Rtcomm function gives unauthenticated remote access (PR:N/AV:N/AC:L) with high confidentiality/integrity and limited availability impact; feature-enablement is treated as environmental, not AC.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N

Primary rating from Vendor (ibm).

CVSS VectorVendor: ibm

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
Low

Lifecycle Timeline

2
Analysis Generated
Aug 13, 2026 - 20:38 vuln.today
CVE Published
Aug 13, 2026 - 19:37 nvd
CRITICAL 9.4

DescriptionCVE.org

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 IBM WebSphere Application Server Liberty is vulnerable to an authentication bypass when the rtcomm-1.0 or rtcommGateway-1.0 feature is enabled.

AnalysisAI

Authentication bypass in IBM WebSphere Application Server Liberty (versions 17.0.0.3 through 26.0.0.8) allows remote attackers to circumvent authentication controls when the rtcomm-1.0 or rtcommGateway-1.0 feature is enabled, exposing protected real-time communication functions. The CVSS 3.1 base score is 9.4 (AV:N/AC:L/PR:N/UI:N/C:H/I:H/A:L), reflecting high confidentiality and integrity impact reachable over the network without credentials. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Reach Liberty Rtcomm endpoint over network
Delivery
Send request to rtcomm signaling function
Exploit
Bypass missing authentication check
Execution
Access protected real-time comm functions
Impact
Read sensitive data and alter integrity
Sign in to reveal

Vulnerability AssessmentAI

Exploitation The single decisive prerequisite is that the target Liberty server must have the rtcomm-1.0 or rtcommGateway-1.0 feature provisioned in server.xml - this is stated directly in the description ('when the rtcomm-1.0 or rtcommGateway-1.0 feature is enabled') and is NOT a default Liberty configuration, which is the primary limiting factor. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The signals are mostly consistent toward high priority but tempered by a configuration prerequisite. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker who can reach a Liberty server that has rtcomm-1.0 or rtcommGateway-1.0 enabled sends crafted requests to the Rtcomm signaling interface and is served protected functionality without providing valid credentials, allowing them to read sensitive data and manipulate real-time communication state. Because the CVSS vector is AV:N/AC:L/PR:N/UI:N, this requires only network reachability and no authentication or victim interaction. …
Remediation Apply the IBM-provided fix per the advisory at https://www.ibm.com/support/pages/node/7283488 (Patch available per vendor advisory); consult that page for the exact interim fix / fix pack level for your version, as no specific fixed version string was included in the input data and should not be assumed. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Recommended ActionAI

Within 24 hours, conduct inventory of all IBM WebSphere Application Server Liberty deployments to identify instances running versions 17.0.0.3 through 26.0.0.8 with rtcomm-1.0 or rtcommGateway-1.0 features enabled; isolate or restrict network access to critical systems pending patch deployment. …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Websphere Application Server Liberty

View all
CVE-2026-8400 CRITICAL
9.8 Aug 05

Unsafe class loading in the ORB (Object Request Broker) component of IBM WebSphere Application Server 8.5, 9.0, and Libe
CVE-2026-11541 CRITICAL
9.8 Jun 30

HTTP request smuggling in IBM WebSphere Application Server (traditional 8.5 and 9.0) and WebSphere Liberty (17.0.0.3 thr
CVE-2026-14529 CRITICAL
9.8 Jul 29

Server-side request forgery in IBM WebSphere Application Server (traditional 9.0 and 8.5) and WebSphere Application Serv
CVE-2026-14976 CRITICAL
9.8 Jul 28

Remote code execution in IBM WebSphere Application Server Liberty (versions 17.0.0.3 through 26.0.0.8) allows unauthenti
CVE-2023-46158 CRITICAL
9.8 Oct 25

IBM WebSphere Application Server Liberty 23.0.0.9 through 23.0.0.10 could provide weaker than expected security due to i
CVE-2026-8646 CRITICAL
9.1 Jun 22

HTTP request smuggling in IBM WebSphere Application Server 8.5/9.0 and WebSphere Application Server Liberty 17.0.0.3 thr
CVE-2026-14980 HIGH
8.8 Jul 30

Cross-site request forgery in IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 enables server-side r
CVE-2026-15064 HIGH
8.7 Jul 28

HTTP response smuggling in IBM WebSphere Application Server 9.0, 8.5, and Liberty versions 17.0.0.3 through 26.0.0.7 all
CVE-2026-15325 HIGH
8.7 Jul 28

HTTP request smuggling in IBM WebSphere Application Server 8.5, 9.0, and Liberty 17.0.0.3 through 26.0.0.7 allows remote
CVE-2026-18499 HIGH
8.1 Aug 12

Privilege escalation in IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 allows an authenticated low
CVE-2026-15328 HIGH
8.1 Jul 28

HTTP request smuggling in IBM WebSphere Application Server (versions 8.5 and 9.0) and WebSphere Application Server Liber
CVE-2026-15280 HIGH
7.5 Jul 28

Information disclosure in IBM WebSphere Liberty ND Collective Controller, versions 17.0.0.3 through 26.0.0.8, allows rem

Same weakness CWE-306 – Missing Authentication for Critical Function

View all
CVE-2024-0012 CRITICAL POC
9.3
CVE-2017-10271 HIGH POC
7.5
CVE-2025-3248 CRITICAL POC
9.8
CVE-2024-11680 CRITICAL POC
9.8
CVE-2024-51567 CRITICAL POC
9.8
CVE-2025-0108 HIGH POC
8.8
CVE-2025-32433 CRITICAL POC
10.0
CVE-2016-2004 CRITICAL POC
9.8

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2022-40684 CRITICAL POC
9.8
CVE-2025-61882 CRITICAL POC
9.8
CVE-2024-0012 CRITICAL POC
9.3
CVE-2023-46805 HIGH POC
8.2

Share

EUVD-2026-58362 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy