CVE Catalog
CVE-2026-14512
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.54%
42th percentile - higher than 42% of all known CVEs
Summary
IBM WebSphere Application Server 9.0 and 8.5 traditional is vulnerable to pre-authentication unsafe deserialization, which could allow a remote attacker to bypass authentication or execute arbitrary code.
Risk Assessment
An attacker can gain unauthorized access to the application server or take control of it.
Recommendation
Apply the security patch from IBM for WebSphere Application Server.
Original NVD description (English source)
IBM WebSphere Application Server 9.0, and 8.5 traditional is vulnerable to pre-authentication unsafe deserialization which could allow a remote attacker to bypass authentication or execute arbitrary code.