PT-2026-45543 · Ibm · Ibm Websphere Application Server

Published 2026-06-01 · Updated 2026-06-02 · CVE-2026-9311

NVD

CVSS v3.1

9.0

Critical

Base vector

AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to remote code execution caused by the bypass of security controls.

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2026-9311

Affected Products

Ibm Websphere Application Server

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-9311 · Security Note
• https://twitter.com/CCBalert/status/2061805487553740918 · Twitter Post
• https://twitter.com/knaepp/status/2061487998709981512 · Twitter Post
• https://ibm.com/support/pages/node/7274733 · Patch, Vendor Advisory