CVE-2026-9311

CriticalCVSS 9.0

Published: 01/06/2026(UTC)Updated: 22/07/2026(UTC)Translated: 23/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.51%

40th percentile - higher than 40% of all known CVEs

IBM WebSphere Application Server 9.0 and 8.5 is vulnerable to remote code execution caused by the bypass of security controls.

An attacker can remotely execute code on the server, potentially leading to full application and data compromise.

Apply security patches provided by IBM for WebSphere Application Server.

Original NVD description (English source)

IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to remote code execution caused by the bypass of security controls.