IBM WebSphere Extreme Scale: Security bypass vulnerability (CVE-2026-101117)
IBM WebSphere Extreme Scale versions 8.6.1.0 through 8.6.2.2 allow a remote attacker to bypass security restrictions due to improper Content Security Policy configuration.
CVE search metadata
CVE search record: CVE-2026-101117. Severity: critical. CVSS: 9.1. KEV: no. Product: WebSphere Extreme Scale (8.6.1.0 - 8.6.2.2). Brief: IBM WebSphere Extreme Scale: Security bypass vulnerability (CVE-2026-101117). Brief link: https://feed.craftedsignal.io/briefs/2026-11-cve-2026-101117/
Triage facts
Revision 2- Applicability
- WebSphere Extreme Scale (8.6.1.0 - 8.6.2.2)
- Evidence
- Unknown
- Severity
- High
- Sources
- 2 public sources
- Freshness
- Revision 2Nov 8, 20:57 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
Revision history 1 entry · Revision 2
- Revision 2
poc_available
Changed: claim_state, has_poc, lastmod, poc_references, references, updates
Sources: 1
IBM WebSphere Extreme Scale versions 8.6.1.0 through 8.6.2.2 are vulnerable to a security bypass caused by an improper Content Security Policy (CSP) configuration. The vulnerability has a CVSS v3.1 base score of 9.1.