9.8
Critical
CVE-2026-8633 IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM WebSphere Application Server…
Description
IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to remote code execution in the Web Server Plug-ins, through a specially crafted request.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty | Versions not published |