NetSight
critical9.0

CVE-2026-9319

IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to potential remote code execution due to deserialization of untrusted data via JAX-WS endpoints wi…

Impact

IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to potential remote code execution due to deserialization of untrusted data via JAX-WS endpoints with WS-Security.

Affected products

VendorProductAffected versions
IbmWebsphere Application Server
from 8.5.0.0 before 8.5.5.30
from 9.0.0.0 before 9.0.5.29

Weakness classification

References