Medium · 4.3 CVE-2026-11537 EUVD-2026-83041GHSA-wm4h-7wjf-j25r

IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

Published Sep 18, 2026 · Updated Sep 19, 2026 · Assigned by ibm

Vendor: IBM Product: WebSphere Application Server

Description

IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to obtain sensitive information about the file system through the FileTransfer servlet.

Affected products

Vendor	Product	Affected	Fixed
IBM	WebSphere Application Server	9.0, 8.5	—

Advisories 1

WID-SEC-2026-3255 IBM WebSphere Application Server: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 12, 2026

References

https://www.ibm.com/support/pages/node/7286610 vendor-advisory patch

CNA	v3.1	4.3
EUVD	v3.1	4.3