AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

IBMCVE-2026-18499

IBM WebSphere Application Server - Liberty: privilege escalation

IBM

CVE-2026-18499 · Published Aug 12, 2026 · updated Aug 17, 2026

High8.1
No fix yet
IBM advisory

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to a privilege escalation when using Liberty collectives.

Affected versions

PackageAffectedFixed in
WebSphere Application Server - Liberty
Product
>= 17.0.0.3, <= 26.0.0.8No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-285

More IBM advisories

All IBM
Medium 4.2Aug 12IBM DataPower Gateway: race conditionCVE-2026-7366no fix yetHigh 8.4Aug 12IBM Db2: buffer overflowCVE-2026-10534no fix yetHigh 8.2Aug 12IBM i: denial of serviceCVE-2026-17485no fix yetCritical 10.0Aug 12IBM DOORS Next: improper authenticationCVE-2024-27253no fix yetMedium 4.3Aug 12IBM Db2: improper authorizationCVE-2026-16480no fix yetHigh 7.8Aug 12IBM i Access Client Solutions: code executionCVE-2026-16695no fix yet