CVE-2026-14512

IBM WebSphere Application Server is affected by an unsafe deserialization and exposure of sensitive information PUBLISHED

Description (CNA)

IBM WebSphere Application Server 9.0, and 8.5 traditional is vulnerable to pre-authentication unsafe deserialization which could allow a remote attacker to bypass authentication or execute arbitrary code.

Affected (CNA)

Vendor / product	Versions
IBM / WebSphere Application Server	affected 9.0; affected 8.5

CWE

CWE-502

References

https://www.ibm.com/support/pages/node/7281649

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.