PatchSiren cyber security CVE debrief
CVE-2026-11713 IBM CVE debrief
IBM WebSphere Application Server Liberty Incorrect Authorization vulnerability allows for privilege escalation when the restConnector-2.0 feature is enabled. Affected versions range from 17.0.0.3 to 26.0.0.9. The vulnerability can lead to potential privilege escalation on affected Liberty servers, requiring defenders to assess exposure, prioritize patching, and monitor for potential exploitation attempts. It is essential to verify if the restConnector-2.0 feature is enabled on Liberty servers and check if affected versions are in use, applying patches if necessary.
- Vendor
- IBM
- Product
- WebSphere Application Server - Liberty
- CVSS
- MEDIUM 5.4
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-10-13
- Original CVE updated
- 2026-10-13
- Advisory published
- 2026-10-13
- Advisory updated
- 2026-10-13
Who should care
Defenders managing IBM WebSphere Application Server - Liberty instances, especially those with the restConnector-2.0 feature enabled, should assess exposure and prioritize patching.
Why it matters
CVE-2026-11713 allows for privilege escalation on IBM WebSphere Application Server - Liberty when the restConnector-2.0 feature is enabled. Defenders managing Liberty servers should assess exposure, prioritize patching, and monitor for potential exploitation attempts.
- Potential privilege escalation on affected Liberty servers
- Need to verify exposure and apply patches
- Monitoring for potential exploitation attempts required
Technical summary
The IBM WebSphere Application Server - Liberty is affected by a privilege escalation vulnerability when the restConnector-2.0 feature is enabled. The vulnerability affects versions from 17.0.0.3 to 26.0.0.9. This vulnerability allows for potential privilege escalation on affected Liberty servers. Defenders should prioritize verifying exposure and applying patches, focusing on Liberty servers with the restConnector-2.0 feature enabled. The CVE record and source item provide details on the affected versions and feature enabling the vulnerability.
Defensive priority
Defenders should prioritize verifying exposure and applying patches, focusing on Liberty servers with the restConnector-2.0 feature enabled.
Recommended defensive actions
- Verify if the restConnector-2.0 feature is enabled on Liberty servers
- Check if affected versions are in use and apply patches if necessary
- Monitor for potential privilege escalation attempts
Evidence notes
The CVE record and source item provide details on the affected versions and feature enabling the vulnerability. However, additional information on exploitation or impact is limited.
Sources and references
Verified primary and authoritative sources
-
CVE-2026-11713 CVE Program record
Publisher, destination, and source semantics verified
URL: https://www.cve.org/CVERecord?id=CVE-2026-11713
CVE Program - Official CVE Program record with source-provided CVE metadata.
-
CVE-2026-11713 NVD vulnerability detail
Publisher, destination, and source semantics verified
URL: https://nvd.nist.gov/vuln/detail/CVE-2026-11713
NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.
Supplemental references
-
IBM WebSphere Application Server Liberty Incorrect Authorization
Unverified legacy reference
URL: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11713.json
cve_program_cvelist_v5
-
Source reference
Unverified legacy reference
URL: https://www.ibm.com/support/pages/node/7291394
Supplemental source - vendor-advisory, patch
Methodology and review provenance
AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.