{"id":"CVE-2026-10844","kind":"vulnerability","aliases":["CVE-2026-10844"],"related":[],"title":"IBM WebSphere Liberty: flaw lets remote attackers run phishing attacks","description":"IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.10 could allow a remote attacker to conduct phishing attacks.","summary":"IBM WebSphere Application Server Liberty versions 17.0.0.3 through 26.0.0.10 contain a flaw that lets a remote attacker conduct phishing attacks. The sources give no further detail on how the attack works.","severity":"medium","cvss":4.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ibm","java","vendor","websphere-liberty"],"not_affected_if":[],"how_to_check":"- Check the installed Liberty version against the affected range 17.0.0.3 through 26.0.0.10 (the sources do not say how to read it on your system).","fix":null,"status":"open","published_at":"2026-11-08T17:16:35+00:00","first_seen_at":"2026-11-08T17:22:00+00:00","triaged_at":"2026-11-08T17:22:12+00:00","updated_at":"2026-11-08T17:22:12+00:00","category":"vendor","confidence":0.4,"triage":{"at":"2026-11-08T17:22:12Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"IBM WebSphere Liberty: flaw lets remote attackers run phishing attacks","impact":"low","summary":"IBM WebSphere Application Server Liberty versions 17.0.0.3 through 26.0.0.10 contain a flaw that lets a remote attacker conduct phishing attacks. The sources give no further detail on how the attack works.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["websphere-liberty","ibm","java"],"confidence":0.4,"fix_status":"unknown","needs_auth":"unknown","worst_case":"Users could be tricked by phishing attacks through the server.","analyst_note":"Find IBM's security bulletin for CVE-2026-10844 to confirm the attack mechanism, required setup, and the fixed version.","how_to_check":"- Check the installed Liberty version against the affected range 17.0.0.3 through 26.0.0.10 (the sources do not say how to read it on your system).","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Teams running IBM WebSphere Application Server Liberty in the affected version range are named by the source. The sources do not say which configurations or features are required, or who can skip it.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000692,"input_tokens":4520,"output_tokens":480,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-10844':13A,16A '-2026':12A,15A '17.0.0.3':29B,59C '26.0.0.10':31B,61C 'allow':63C 'applic':25B,56C 'attack':7A,10A,39B,42B,52B,66C,70C 'conduct':40B,68C 'contain':32B 'could':62C 'cve':11A,14A 'detail':48B 'flaw':4A,34B 'give':45B 'ibm':1A,17B,23B,54C 'java':18B 'let':5A,36B 'liberti':3A,22B,27B,58C 'phish':9A,41B,69C 'remot':6A,38B,65C 'run':8A 'server':26B,57C 'sourc':44B 'vendor':19B 'version':28B 'webspher':2A,21B,24B,55C 'websphere-liberti':20B 'work':53B","nicknames":[],"mitigations":[],"who_affected":"Teams running IBM WebSphere Application Server Liberty in the affected version range are named by the source. The sources do not say which configurations or features are required, or who can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["ibm","java","medium","vendor","websphereliberty"],"campaign_type":null,"search_a":"'-10844':13A,16A '-2026':12A,15A 'attack':7A,10A 'cve':11A,14A 'flaw':4A 'ibm':1A 'let':5A 'liberti':3A 'phish':9A 'remot':6A 'run':8A 'webspher':2A","search_b":"'17.0.0.3':29B '26.0.0.10':31B 'applic':25B 'attack':39B,42B,52B 'conduct':40B 'contain':32B 'detail':48B 'flaw':34B 'give':45B 'ibm':17B,23B 'java':18B 'let':36B 'liberti':22B,27B 'phish':41B 'remot':38B 'server':26B 'sourc':44B 'vendor':19B 'version':28B 'webspher':21B,24B 'websphere-liberti':20B 'work':53B","search_c":"'17.0.0.3':59C '26.0.0.10':61C 'allow':63C 'applic':56C 'attack':66C,70C 'conduct':68C 'could':62C 'ibm':54C 'liberti':58C 'phish':69C 'remot':65C 'server':57C 'webspher':55C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-08T17:16:35+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss_by":"psirt@us.ibm.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-10844","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-10844","severity":null,"published_at":"2026-11-08T17:16:35+00:00","modified_at":"2026-11-08T17:16:36+00:00","first_seen_at":"2026-11-08T17:22:00+00:00","fetched_at":"2026-11-08T17:22:00+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}