Our takeIBM published advisory AV26-1040 covering confirmed vulnerabilities in WebSphere Application Server (≤8.5 and ≤9.0), Liberty (≤26.0.0.10), and mcp-context-forge (≤1.0.2). Patch on your normal cycle if you run any of these; most smaller shops don't use them and can ignore this one.Security Resilience desk
Sources (1)
- cccs · cccs
What this means for you — Security leader:Apply the fixes in IBM Security Advisory AV26-1040 to WebSphere Application Server (≤8.5 and ≤9.0), WebSphere Liberty (≤26.0.0.10), and mcp-context-forge (≤1.0.2).
What this means for you — Lean IT orgs:If you run any of these IBM WebSphere or mcp-context-forge products, update them now using the instructions in advisory AV26-1040; most small teams don't use them and can ignore this one.
What this means for you — MSP:Check client estates for WebSphere Application Server (≤8.5/9.0), WebSphere Liberty (≤26.0.0.10), or mcp-context-forge (≤1.0.2) and apply IBM AV26-1040 patches on the next maintenance window.
What this means for you — Researcher:IBM AV26-1040 discloses vulnerabilities affecting WebSphere Application Server ≤8.5/9.0, WebSphere Liberty ≤26.0.0.10, and mcp-context-forge ≤1.0.2.