Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-16184

No fix known EPSS <1%CVSS 7.0

IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to bypass authentication by sending a crafted unauthenticated request.

Published 2026-07-28 · CVE record · OSV

Products: ibm websphere_application_server