Is CVE-2026-11806 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-11806?

CVE-2026-11806 has a CVSS v3 severity of HIGH (7.2).

Back

CVE-2026-11806

Description

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 is affected by an arbitrary file read vulnerability with the restConnector-2.0 feature enabled.