CVE-2026-8858 — WebSphere Application Server Remote Code Execution
IBM WebSphere Application Server and IBM WebSphere Application Server Liberty are vulnerable to remote code execution and denial of service in the WebSphere Web Server Plug-in c…
Published: 2026-06-22 · CVSS: 7.5 · CVSS 3.1
IBM WebSphere Application Server and IBM WebSphere Application Server Liberty are vulnerable to remote code execution and denial of service in the WebSphere Web Server Plug-in component. This vulnerability can be exploited when an attacker impersonates the application server and sends crafted responses to the plug-in.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7