CVE-2026-14512

No fix known EPSS <1%CVSS 9.8

IBM WebSphere Application Server 9.0, and 8.5 traditional is vulnerable to pre-authentication unsafe deserialization which could allow a remote attacker to bypass authentication or execute arbitrary code.

Published 2026-07-28 · CVE record · OSV

Products: ibm websphere_application_server