IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 is affected by a privilege escalation vulnerability with the restConnector-2.0 feature enabled.

Timeline

Detection, updates, and resolution for this record.

1. Oct 13, 2026 · Catalog

   Detected

   IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 is affected by a privilege escalation vulnerability with the restConnector-2.0 feature enabled.

2. Oct 14, 2026 · NIST NVD

   Updated

   IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 is affected by a privilege escalation vulnerability with the restConnector-2.0 feature enabled.

Sources

• CVE.orgCVE-2026-11713

  Official CVE identifier

  cve.org
• FIRST EPSSCVE-2026-11713

  30-day exploitation probability 0.2%

  first.org
• NIST NVDCVE-2026-11713

  IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 is affected by a privilege escalation vulnerability with the restConnector-2.0 feature enabled.

  nvd.nist.gov

References

• Reference · ibm.com