CVE-2026-14909
Awaiting Analysis Awaiting Analysis - Queue

Information Disclosure in IBM WebSphere Liberty

Publication date: 2026-10-13

Last updated on: 2026-10-14

Assigner: IBM Corporation

Description
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 is affected by an information disclosure vulnerability that allows an authenticated attacker to obtain sensitive information when restConnector-2.0 is enbabled.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-13
Last Modified
2026-10-14
Generated
2026-10-19
AI Q&A
2026-10-14
EPSS Evaluated
2026-10-18
NVD
CVE-2026-14909
EUVD
EUVD-2026-100489

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
IBM WebSphere Application Server - Liberty 17.0.0.3

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-209 The product generates an error message that includes sensitive information about its environment, users, or associated data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is an information disclosure vulnerability in IBM WebSphere Application Server - Liberty versions 17.0.0.3 through 26.0.0.9. When the restConnector-2.0 feature is enabled, an authenticated attacker can access sensitive information that should not be exposed.

Impact Analysis

An attacker could exploit this to steal confidential data such as user credentials, configuration details, or other sensitive information from the server. This could lead to further attacks like unauthorized access or data breaches.

Compliance Impact

This vulnerability could result in unauthorized data exposure, violating GDPR's data protection principles and HIPAA's security requirements. Organizations may face fines or penalties for failing to protect sensitive data.

Mitigation Strategies

Disable restConnector-2.0 feature in IBM WebSphere Application Server - Liberty if enabled. Apply the latest security patches from IBM as soon as they are available.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-14909. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart