VulnSocial

CVE-2026-3621Disclosure(ibm / websphere_application_server)

LOWCVSS 5.9 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.4 IBM WebSphere Application Server Liberty is vulnerable to identity spoofing under limited conditions when an application is deployed without authentication and authorization configured.

ibm CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-269

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • websphere_application_server

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-04-22); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
ibm
Products
websphere_application_server

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-04-22: 1Mentions · 2026-04-23: 1Technical Details · 2026-04-22: 1Technical Details · 2026-04-23: 104-2204-23
Signal classification2 categories
Disclosure
150.0%
General
150.0%
Referenced assets2 URLs
By indicator
Classification over time
DateTotalLabels
2026-04-221
Disclosure1
2026-04-231
General1
Full discourse2 posts
  • CVE@CVEnew
    General

    CVE-2026-3621 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.4 IBM WebSphere Application Server Liberty is vulnerable to identity spoofing under limited condition… https://www.cve.org/CVERecord?id=CVE-2026-3621

    Post summary

    The tweet only references the CVE record for CVE‑2026‑3621, noting a vulnerability in IBM WebSphere Application Server Liberty that allows identity spoofing under limited conditions, without providing further details or actionable information.

    0000088
    57.2K followersView on X
  • Matthias Knäpper@knaepp
    Disclosure

    IBM WebSphere Application Server Liberty is affected by identity spoofing (CVE-2026-3621) https://tinyurl.com/29nvybqe

    Post summary

    The note informs that IBM WebSphere Application Server Liberty is affected by identity spoofing (CVE-2026-3621); no PoC, exploit, or mitigation information is provided.

    0000065
    108 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appibmwebsphere_application_server---

Explore more

Back to dashboardibm CVEswebsphere_application_server vulnerabilities