DT496165 Address rtcomm confused broker vulnerability
DT496294 OLGH35469: IBM WebSphere Application Server Liberty is affected by a denial of service vulnerability when the restConnector-2.0 feature is enabled (CVE-2026-16192)
DT496328 OLGH35541: IBM WebSphere Application Server Liberty is affected by Denial of Service vulnerabilities (CVE-2026-57819, CVE-2026-54225, CVE-2026-64958)
DT497316 OLGH35545: IBM WebSphere Application Server Liberty is affected by a denial of service vulnerability (CVE-2026-10571)
DT497580 OLGH35567: IBM WebSphere Application Server Liberty is affected by a privilege escalation when using Liberty collectives (CVE-2026-18499)
PH71678 OLGH35471: IBM WebSphere Application Server is affected by multiple vulnerabilities (CVE-2026-14980, CVE-2026-2482)
PH71847 OLGH35555: HTTP channel parser improvements for handling header and body framing
PH72191 OLGH35361: IBM WebSphere Application Server Liberty is affected by multiple vulnerabilities (CVE-2026-15328,CVE-2026-15064,CVE-2026-15325,CVE-2026-14981)
OLGH34313 maxParamPerRequest is not honor the maximum configured number.
OLGH35022 EclipseLink bug comparing boolean value in H2
OLGH35332 Graceful Startup Issue - liberty-kafka connector: @Incoming methods receive messages before application startup completes   causes permanent channel death
OLGH35345 pluginUtility merge fails when encounting an "improperly scoped subset"
OLGH35355 Throughput performance degradation due to enabling logged out cookie cache
OLGH35361 [PH72191]: IBM WebSphere Application Server Liberty is affected by multiple vulnerabilities (CVE-2026-15328,CVE-2026-15064,CVE-2026-15325,CVE-2026-14981)
OLGH35424 Invocation.Builder.property() settings ignored by HTTP transport for set.content.type.for.empty.request
OLGH35469 [DT496294]: IBM WebSphere Application Server Liberty is affected by a denial of service vulnerability when the restConnector-2.0 feature is enabled (CVE-2026-16192)
OLGH35471 [PH71678]: IBM WebSphere Application Server is affected by multiple vulnerabilities (CVE-2026-14980, CVE-2026-2482)
OLGH35473 Jakarta Security 4.0 (appSecurity-6.0) HAM processing fails when deployed using mvn liberty:dev
OLGH35489 z/OS ICH408I SAF EJBROLE lookup triggered for unauthenticated JAX-RS requests due to null principal passed to isUserInRole
OLGH35541 [DT496328]: IBM WebSphere Application Server Liberty is affected by Denial of Service vulnerabilities (CVE-2026-57819, CVE-2026-54225, CVE-2026-64958)
OLGH35545 [DT497316]: IBM WebSphere Application Server Liberty is affected by a denial of service vulnerability (CVE-2026-10571)
OLGH35555 [PH71847]: HTTP channel parser improvements for handling header and body framing
OLGH35567 [DT497580]: IBM WebSphere Application Server Liberty is affected by a privilege escalation when using Liberty collectives (CVE-2026-18499)
OLGH35587 Cannot invoke "jakarta.interceptor.InvocationContext.getParameters()" because "this.firstInvocation" is null
