ZeroDay Findings
Sign inSign up

Findings

CVE-2026-103499

IBM security advisory (AV26-1040)

Published Oct 14, 2026

Serial number: AV26-1040 Date: October 14, 2026 As of October 13, 2026, IBM is affected by vulnerabilities in the following products: WebSphere Application Server Prior to or equal to 8.5 Prior to or equal to 9.0 WebSphere Application Server - Liberty Prior to or equal to 26.0.0.10 mcp-context-forge Prior to or equal to 1.0.2 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 14, 2026 · Canadian Centre for Cyber Security

    Detected

    Serial number: AV26-1040 Date: October 14, 2026 As of October 13, 2026, IBM is affected by vulnerabilities in the following products: WebSphere Application Server Prior to or equal to 8.5 Prior to or equal to 9.0 WebSphere Application Server - Liberty Prior to or equal to 26.0.0.10 mcp-context-forge Prior to or equal to 1.0.2 The Cyber Centre encourages users and administrators to review the provi

Sources

  • Canadian Centre for Cyber SecurityGovernment advisoryCVE-2026-103499

    Serial number: AV26-1040 Date: October 14, 2026 As of October 13, 2026, IBM is affected by vulnerabilities in the following products: WebSphere Application Server Prior to or equal to 8.5 Prior to or equal to 9.0 WebSphere Application Server - Liberty Prior to or equal to 26.0.0.

    cyber.gc.ca
  • CVE.orgVulnerability recordCVE-2026-103499

    Official CVE identifier

    cve.org