Low · 3.7 CVE-2026-11545 EUVD-2026-83280GHSA-429j-r6c4-rjj4

IBM WebSphere Application Server is affected by a privilege escalation

Published Sep 18, 2026 · Updated Sep 19, 2026 · Assigned by ibm

Vendor: IBM Product: WebSphere Application Server

Description

IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to obtain sensitive information from the administrative console due to missing authorization checks.

Affected products

Vendor	Product	Affected	Fixed
IBM	WebSphere Application Server	8.5, 9.0	—

Advisories 1

WID-SEC-2026-3255 IBM WebSphere Application Server: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 12, 2026

References

https://www.ibm.com/support/pages/node/7286730 vendor-advisory patch