CVE-2026-10845highCWE-287

CVE-2026-10845: high-severity vulnerability in IBM WebSphere Application Server

IBM WebSphere Application Server is affected by an authentication bypass vulnerability

Published

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.3epss 0.5%
exploitation probability
0.5%top 62% of all CVEs
observed exploitation
nono source reports it
IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to bypass authentication and gain unauthorized access to JAX-WS applications.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Affected products
IBM · WebSphere Application Server
Related CVEs — IBM WebSphere Application Server

In the same product, most dangerous first.

CVE-2019-4279CRITICALCVE-2019-4279EPSS 79.9%CVE-2020-4450CRITICALCVE-2020-4450EPSS 34.2%CVE-2025-36038CRITICALIBM WebSphere Application Server code executionEPSS 13.3%CVE-2020-4464HIGHCVE-2020-4464EPSS 13.2%CVE-2020-4448CRITICALCVE-2020-4448EPSS 12.2%CVE-2020-4589HIGHCVE-2020-4589EPSS 8.5%
References
https://www.ibm.com/support/pages/node/7276597