CVE-2026-14512
Critical · CVSS 9.8- CVSS
- 9.8
- nvd
- EPSS
- 0.54%
- 42th pct
- KEV
- No
- Class
- other
- CWE-502
Description
IBM WebSphere Application Server 9.0, and 8.5 traditional is vulnerable to pre-authentication unsafe deserialization which could allow a remote attacker to bypass authentication or execute arbitrary code.
References
Status: profiled · ingested 2026-08-05T18:00:56.000Z