CVE-2026-8633

Critical · CVSS 9.8

CVSS: 9.8; nvd
EPSS: —
KEV: No
Class: other; CWE-94

Description

IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to remote code execution in the Web Server Plug-ins, through a specially crafted request.

References

https://www.ibm.com/support/pages/node/7274072

Status: profiled · ingested 2026-07-23T12:00:18.000Z