IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 IBM WebSphere Application Server Liberty is vulnerable to an authentication bypass when the rtcomm-1.0 or rtcommGateway-1.0 featur…

Critical CVSS 9.4

CVECVE-2026-14525

First seen2026-08-13 23:16 UTC

Disclosed2026-08-13 20:17 UTC

Last updated2026-08-13 23:16 UTC

Channel statusauto

Summary

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 IBM WebSphere Application Server Liberty is vulnerable to an authentication bypass when the rtcomm-1.0 or rtcommGateway-1.0 feature is enabled.

In-depth triage

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Sources

NVD DATABASE

Original Links

https://www.ibm.com/support/pages/node/7283488

Timeline

2026-08-13 nvd_ingest NVD