CVE-2026-9311

9.0 criticalEPSS 0.5%

Critical (9.0) in ibm websphere application server. EPSS 0.5% chance of exploitation in the next 30 days.

IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to remote code execution caused by the bypass of security controls.

Severity

9.0 critical

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 43% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2026-06-01
Modified: 2026-07-22
Record from: the NVD, synced 2026-10-19