Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.1 could allow a privileged user to upload a zip archive containing path traversal sequences resulting in an overwrite of files leading to arbitrary code execution.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-01-28 | 1 | Disclosure1 |
| 2026-02-02 | 2 | Disclosure2 |
CVE-2025-14914 IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.1 could allow a privileged user to upload a zip archive containing path traversal sequences resulting… https://www.cve.org/CVERecord?id=CVE-2025-14914
Post summary
The post announces the existence of CVE‑2025‑14914, describing a path‑traversal vulnerability in IBM WebSphere Application Server Liberty that could be exploited by privileged users.
CVE-2025-14914 Path Traversal Vulnerability in IBM WebSphere Application Server Liberty Enabling Code Execution https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-14914
Post summary
The text identifies CVE‑2025‑14914 as a path traversal flaw in IBM WebSphere Application Server Liberty that can lead to code execution, providing a link to detailed vulnerability information but no evidence of PoC, exploitation, or patch.
PH69485:IBM WebSphere Application Server Liberty is affected by a remote code execution vulnerability (CVE-2025-14914 CVSS 7.6) https://tinyurl.com/2yoaovx9
Post summary
The post announces a remote code execution vulnerability (CVE-2025-14914) affecting IBM WebSphere Application Server Liberty, providing its CVSS score but no further details on exploitation or mitigation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | ibm | websphere_application_server | - | - | - |