CVE-2026-78636

medium

Description

IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.10 is affected by an information disclosure vulnerability due to unsafe class reflection in the JMX REST connector body parser.

References

https://www.ibm.com/support/pages/node/7295268

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119725

Details

Source: Mitre, NVD

Published: 2026-11-08

Updated: 2026-11-09

Risk Information

CVSS v2

Base Score: 4

Vector: CVSS2#AV:N/AC:L/Au:S/C:P/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 4.3

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N