CVE-2026-8858 — WebSphere Application Server Remote Code Execution

CVE-2026-8858

WebSphere Application Server Remote Code Execution PUBLISHED

Description (CNA)

IBM WebSphere Application Server and IBM WebSphere Application Server Liberty are vulnerable to remote code execution and denial of service in the WebSphere Web Server Plug-in component. This vulnerability can be exploited when an attacker impersonates the application server and sends crafted responses to the plug-in.

Affected (CNA)

Vendor / product	Versions
IBM / WebSphere Application Server	affected 8.5; affected 9.0

CWE

CWE-94

References

https://www.ibm.com/support/pages/node/7276560

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.