CVE-2026-11713

Awaiting Analysis Awaiting Analysis - Queue

Privilege Escalation in IBM WebSphere Liberty

Publication date: 2026-10-13

Last updated on: 2026-10-17

Assigner: IBM Corporation

Description

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 is affected by a privilege escalation vulnerability with the restConnector-2.0 feature enabled.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-13

Last Modified

2026-10-17

Generated

2026-10-19

AI Q&A

2026-10-14

EPSS Evaluated

2026-10-18

NVD

CVE-2026-11713

EUVD

EUVD-2026-100491

Affected Vendors & Products

Vendor	Product	Version / Range
IBM	WebSphere	Application Server - Liberty 17.0.0.3

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-863	The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

Executive Summary

IBM WebSphere Application Server - Liberty versions 17.0.0.3 through 26.0.0.9 have a privilege escalation vulnerability when the restConnector-2.0 feature is enabled. This allows an attacker with local access to gain elevated privileges.

Impact Analysis

An attacker could exploit this to gain unauthorized access or perform actions with higher privileges than intended. This may lead to data breaches, unauthorized system changes, or further network compromise if the server is part of a larger system.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR's data protection requirements or HIPAA's security rules for protected health information. Non-compliance may result in legal penalties, fines, or reputational damage.

Mitigation Strategies

Disable the restConnector-2.0 feature if enabled on IBM WebSphere Application Server - Liberty versions 17.0.0.3 through 26.0.0.9 to prevent privilege escalation.

Hi! I’m here to help you understand CVE-2026-11713. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70