8.1
High
CVE-2026-9072 IBM WebSphere Application Server and IBM WebSphere Application Server Liberty - when using Intelligent Management with…
Description
IBM WebSphere Application Server and IBM WebSphere Application Server Liberty - when using Intelligent Management with the WebSphere WebServer Plug-in component - are vulnerable to remote code execution and denial of service. This vulnerability can be exploited when an attacker impersonates backend servers and sends crafted responses to the plug-in.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| i 7.6 | 7.6.0 → 1.8.4 | No fix stated |
| i | 7.5.0 | No fix stated |
| i | 7.4.0 | No fix stated |
| i | 7.3.0 | No fix stated |
| WebSphere Application Server | 9.0 | No fix stated |
| WebSphere Application Server | 8.5 | No fix stated |
Other CVEs of i
The 214 CVEs of i →
CVE-2026-93744
IBM i 7.3, 7.4, 7.5, and 7.6 could allow an unathenticated remote attacker to bypass security restrictions due to…
6.5
Medium
CVE-2026-17068
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to bypass NFS version restrictions due to improper enforcement…
5.4
Medium
CVE-2026-17073
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to obtain sensitive information due to missing subtree…
5.4
Medium
CVE-2026-17275
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform unauthorized manipulation of distributed…
3.7
Low