9.8 CriticalCWE-94
CVE-2026-8633
IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty vulnerability
IBMWeb Server Plug-ins for WebSphere Application Server and WebSphere Liberty
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
0.9%probability of exploitation in the next 30 days
Higher than 60% of scored CVEs
SeverityCVSS
9.8Critical
Description NVD
IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to remote code execution in the Web Server Plug-ins, through a specially crafted request.
Coverage 1 article · 1 outlet
- IBM flags critical WebSphere CVE-2026-8633 flaw in versionsSecurityOnline · first in our coverage