Security features bypass in IBM WebSphere Application Server Liberty - CVE-2026-5516

Vulnerability identifier: #VU132031

CSH Severity: Low

CVSS v4: 5.9 [CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-5516

CWE-ID: CWE-254

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote privileged attacker to gain access to potentially sensitive information.

The vulnerability exists due to excessive data output by the application. A remote privileged attacker can gain unauthorized access to sensitive information on the system.

IBM WebSphere Application Server Liberty
IBM Tivoli Application Dependency Discovery Manager
IBM Cloud Transformation Advisor
IBM Tivoli Monitoring
IBM TXSeries for Multiplatforms
IBM SPSS Collaboration and Deployment Services
IBM Transformation Extender Advanced
PowerVM NovaLink
Storage Protect for Virtual Environments: Data Protection for VMware
Storage Protect for Virtual Environments: Data Protection for Hyper-V
Application Modernization Accelerator
Storage Protect Operations Center

Install updates from vendor's website.

IBM WebSphere Application Server Liberty - update to 26.0.0.6
IBM Cloud Transformation Advisor - update to 5.0.0
PowerVM NovaLink - addressed in versions 2.2.1.1-260708, 2.3.3-260714
IBM Tivoli Monitoring - update to 6.3.0.7 Service Pack 22
Storage Protect for Virtual Environments: Data Protection for VMware - update to 8.2.2.0
Storage Protect for Virtual Environments: Data Protection for Hyper-V - update to 8.2.2.0
IBM TXSeries for Multiplatforms - update to 11.1.0.0 ifix22
IBM Transformation Extender Advanced - update to 10.0.2.2
Application Modernization Accelerator - update to 5.0.0
Storage Protect Operations Center - update to 8.2.2

• https://www.ibm.com/support/pages/node/7273425

• Security features bypass in IBM WebSphere Application Server - Liberty
• Multiple vulnerabilities in IBM SPSS Collaboration and Deployment Services
• Multiple vulnerabilities in IBM Application Modernization Accelerator
• Multiple vulnerabilities in IBM Transformation Advisor
• Multiple vulnerabilities in IBM PowerVM Novalink
• Multiple vulnerabilities in IBM TXSeries for Multiplatforms
• Security features bypass in IBM Storage Protect Operations Center
• Security features bypass in IBM Storage Protect Data Protection for Virtual Environments
• Multiple vulnerabilities in IBM Tivoli Monitoring
• Multiple vulnerabilities in IBM Tivoli Application Dependency Discovery Manager
• Multiple vulnerabilities in IBM Sterling Transformation Extender Advanced