CVE-2026-8633

CriticalCVSS 9.8

Published: 26/05/2026(UTC)Updated: 23/07/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.85%

54th percentile - higher than 54% of all known CVEs

Summary

A remote code execution vulnerability in IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty (versions 8.5, 9.0) allows an attacker to execute arbitrary code via a specially crafted request.

Risk Assessment

An attacker can remotely execute arbitrary code on the server, potentially leading to full system compromise and data breach.

Recommendation

Immediately apply patches provided by IBM for WebSphere Application Server and WebSphere Liberty.

Original NVD description (English source)

IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to remote code execution in the Web Server Plug-ins, through a specially crafted request.