CVE-2026-14974

No fix known EPSS <1%CVSS 8.1

IBM WebSphere Application Server 8.5, and 9.0 traditional could allow a remote attacker to execute arbitrary code caused by unsafe deserialization of untrusted data.

Published 2026-07-28 · CVE record · OSV

Products: ibm websphere_application_server