CVE-2026-8400
Fixed in a distro release EPSS <1%CVSS 8.1
IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty Continuous delivery has a flaw in the ORB component in IBM SDK, Java Technology Edition, may allow a malicious IIOP server to induce loading and instantation of arbitrary classes.
Products: ibm websphere_application_server, IBM WebSphere Application Server Liberty
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 8 | java-1.8.0-ibm | 1:1.8.0.8.70-1.el8_10 |
| Red Hat Enterprise Linux 8 | java-1.8.0-ibm-demo | 1:1.8.0.8.70-1.el8_10 |
| Red Hat Enterprise Linux 8 | java-1.8.0-ibm-devel | 1:1.8.0.8.70-1.el8_10 |
| Red Hat Enterprise Linux 8 | java-1.8.0-ibm-headless | 1:1.8.0.8.70-1.el8_10 |
| Red Hat Enterprise Linux 8 | java-1.8.0-ibm-jdbc | 1:1.8.0.8.70-1.el8_10 |
| Red Hat Enterprise Linux 8 | java-1.8.0-ibm-plugin | 1:1.8.0.8.70-1.el8_10 |
| Red Hat Enterprise Linux 8 | java-1.8.0-ibm-src | 1:1.8.0.8.70-1.el8_10 |
| Red Hat Enterprise Linux 8 | java-1.8.0-ibm-webstart | 1:1.8.0.8.70-1.el8_10 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | java-1_8_0-ibm | 1.8.0_sr8.71-150000.3.125.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | java-1_8_0-ibm | 1.8.0_sr8.70-150000.3.119.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | java-1_8_0-ibm | 1.8.0_sr8.70-150000.3.119.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | java-1_8_0-ibm | 1.8.0_sr8.71-150000.3.125.1 |
| SUSE Linux Enterprise Module for Legacy 15 SP7 | java-1_8_0-ibm | 1.8.0_sr8.71-150000.3.125.1 |
| SUSE Linux Enterprise Module for Legacy 15 SP7 | java-1_8_0-ibm | 1.8.0_sr8.70-150000.3.119.1 |
| SUSE Linux Enterprise Server 12 SP5-LTSS | java-1_8_0-ibm | 1.8.0_sr8.71-30.156.1 |
| SUSE Linux Enterprise Server 12 SP5-LTSS | java-1_8_0-ibm | 1.8.0_sr8.70-30.153.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | java-1_8_0-ibm | 1.8.0_sr8.70-150000.3.119.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | java-1_8_0-ibm | 1.8.0_sr8.71-150000.3.125.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | java-1_8_0-ibm | 1.8.0_sr8.71-150000.3.125.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | java-1_8_0-ibm | 1.8.0_sr8.70-150000.3.119.1 |
| SUSE Linux Enterprise Server 15 SP6-LTSS | java-1_8_0-ibm | 1.8.0_sr8.70-150000.3.119.1 |
| SUSE Linux Enterprise Server 15 SP6-LTSS | java-1_8_0-ibm | 1.8.0_sr8.71-150000.3.125.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | java-1_8_0-ibm | 1.8.0_sr8.71-30.156.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | java-1_8_0-ibm | 1.8.0_sr8.70-30.153.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | java-1_8_0-ibm | 1.8.0_sr8.70-150000.3.119.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | java-1_8_0-ibm | 1.8.0_sr8.71-150000.3.125.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | java-1_8_0-ibm | 1.8.0_sr8.70-150000.3.119.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | java-1_8_0-ibm | 1.8.0_sr8.71-150000.3.125.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | java-1_8_0-ibm | 1.8.0_sr8.70-150000.3.119.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | java-1_8_0-ibm | 1.8.0_sr8.71-150000.3.125.1 |