CVE-2026-10852

No fix known EPSS <1%CVSS 5.9

IBM WebSphere Application Server and IBM WebSphere Application Server Liberty are vulnerable to denial of service in the WebSphere WebServer Plug-in component when an attacker can pass crafted requests to the web server.

Published 2026-06-22 · CVE record · OSV

Products: ibm websphere_application_server