Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-9311: IBM WebSphere Application Server: Remote Code Execution Risk

CVE-2026-9311

Summary

IBM WebSphere Application Server 9.0 and 8.5 has a security weakness that allows hackers to run malicious code on your server. This means they could potentially access sensitive data or take control of your server. To protect your system, update to the latest version of the software as soon as possible.

Original title

IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to remote code execution caused by the bypass of security controls.

Original description

IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to remote code execution caused by the bypass of security controls.

nvd CVSS3.1 9.0

Vulnerability type

CWE-94 Code Injection

https://www.ibm.com/support/pages/node/7274733

Published: 1 Jun 2026 · Updated: 1 Jun 2026 · First seen: 1 Jun 2026