Is CVE-2026-18499 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-18499?

CVE-2026-18499 has a CVSS v3 severity of HIGH (8.1).

Back

Description

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to a privilege escalation when using Liberty collectives.