← Database

CVE-2026-9072

HIGH CVSS: 8.1 Published: 2026-06-22 Modified: 2026-07-09

Description

IBM WebSphere Application Server and IBM WebSphere Application Server Liberty - when using Intelligent Management with the WebSphere WebServer Plug-in component - are vulnerable to remote code execution and denial of service. This vulnerability can be exploited when an attacker impersonates backend servers and sends crafted responses to the plug-in.

Affected Platforms

Ibm I

Weakness Type

CWE-94

References