CVE-2026-5516

No fix known EPSS <1%CVSS 4.4

IBM WebSphere Application Server - Liberty 22.0.0.11 through 26.0.0.5 IBM WebSphere Application Server Liberty could allow a remote attacker to bypass security under limited conditions by exploiting a specific timing window.

Published 2026-05-27 · CVE record · OSV

Products: IBM WebSphere Application Server Liberty