CVE-2025-14917 | IBM WebSphere Application Server up to 26.0.0.3 Setting default password

March 26, 2026 Yanac

A vulnerability marked as critical has been reported in IBM WebSphere Application Server up to 26.0.0.3. This impacts an unknown function of the component Setting Handler. The manipulation leads to use of default password.

This vulnerability is listed as CVE-2025-14917. The attack must be carried out locally. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More