Skip to content
Threat Feed
Subscribe

Product

WebSphere Application Server - Liberty >= 17.0.0.3 <= 26.0.0.7

1 brief RSS
critical advisory

IBM WebSphere Application Server Authentication Bypass Vulnerability (CVE-2026-16184)

A remote attacker can bypass authentication in IBM WebSphere Application Server versions 9.0 and 8.5 by sending a crafted unauthenticated request, potentially leading to unauthorized access and impact on confidentiality, integrity, and availability.

WebSphere Application Server 9.0 +8 vulnerability authentication-bypass websphere broken-access-control privilege-escalation deserialization RCE server-side-request-forgery +6
5t 7c 5i