High severity7.6NVD Advisory· Published Feb 2, 2026· Updated Jun 17, 2026
CVE-2025-14914
CVE-2025-14914
Description
IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.1 could allow a privileged user to upload a zip archive containing path traversal sequences resulting in an overwrite of files leading to arbitrary code execution.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Range: 17.0.0.3 - 26.0.0.1
cpe:2.3:a:ibm:websphere_application_server:17.0.0.3:*:*:*:liberty:*:*:*+ 1 more
- cpe:2.3:a:ibm:websphere_application_server:17.0.0.3:*:*:*:liberty:*:*:*range: 17.0.0.3
- cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:liberty:*:*:*range: >=17.0.0.3,<=26.0.0.1
Patches
Vulnerability mechanics
References
1- www.ibm.com/support/pages/node/7258224nvdVendor Advisory
News mentions
0No linked articles in our index yet.