Vulnerability intelligence
CVE-2026-9311
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to remote code execution caused by the bypass of security controls.
CVSS Score
9
Critical
EPSS — Exploit Probability
0.5%
Riskier than 42% of all CVEs · checked 2026-09-08
Exploitation
Not in CISA KEV
KEV does not include every exploited vulnerability
Remediation
Patch available
Vendor fix published
1 article across 1 outlet · first covered Jun 5, 2026 · latest Jun 5, 2026
Coverage timeline
-
IBM WebSphere bugs risk remote code execution, patch nowsecurityonline.info · Jun 5, 2026