PT-2026-65588 · Ibm · Ibm Websphere Application Server

CVE-2026-16184 · Published 2026-07-28 · Updated 2026-07-28

Mitre

CVSS v3.1

7.0

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to bypass authentication by sending a crafted unauthenticated request.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-16184

Affected Products

Ibm Websphere Application Server

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-16184 · Security Note
• https://ibm.com/support/pages/node/7281628 · Patch, Vendor Advisory