CVE-2026-8644

No fix known EPSS <1%CVSS 9.1

IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to identity spoofing.

Published 2026-06-01 · CVE record · OSV

Products: ibm websphere_application_server