Vulnerability intelligence
CVE-2026-9319
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to potential remote code execution due to deserialization of untrusted data via JAX-WS endpoints with WS-Security.
CVSS Score
9
Critical
EPSS — Exploit Probability
0.5%
Riskier than 38% of all CVEs · checked 2026-09-05
Exploitation
Not in CISA KEV
KEV does not include every exploited vulnerability
Remediation
Patch available
Vendor fix published
1 article across 1 outlet · first covered Jun 5, 2026 · latest Jun 5, 2026
Coverage timeline
-
IBM WebSphere bugs risk remote code execution, patch nowsecurityonline.info · Jun 5, 2026