CVE-2026-8400 — Multiple Vulnerabilities in IBM® Java SDK affect IBM WebSphere Application Server and WebSphere Application Server Lib…

CVE-2026-8400

Multiple Vulnerabilities in IBM® Java SDK affect IBM WebSphere Application Server and WebSphere Application Server Liberty due to the July 2026 CPU PUBLISHED

Description (CNA)

IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty Continuous delivery has a flaw in the ORB component in IBM SDK, Java Technology Edition, may allow a malicious IIOP server to induce loading and instantation of arbitrary classes.

Affected (CNA)

Vendor / product	Versions
IBM / WebSphere Application Server	affected 8.5; affected 9.0
IBM / WebSphere Application Server - Liberty	affected Continuous delivery

CWE

CWE-470

References

https://www.ibm.com/support/pages/node/7282446

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.