← Database

CVE-2026-9319

CRITICAL CVSS: 9.0 Published: 2026-06-01 Modified: 2026-07-22

Description

IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to potential remote code execution due to deserialization of untrusted data via JAX-WS endpoints with WS-Security.

Affected Platforms

Ibm Websphere Application Server

Weakness Type

CWE-502

References