9.0 CriticalCWE-94
CVE-2026-9311
IBM WebSphere Application Server vulnerability
IBMWebSphere Application Server
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
0.5%probability of exploitation in the next 30 days
Higher than 43% of scored CVEs
SeverityCVSS
9.0Critical
Description NVD
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to remote code execution caused by the bypass of security controls.
Coverage 1 article · 1 outlet
- IBM WebSphere bugs risk remote code execution, patch nowSecurityOnline · first in our coverage