← back
CVE-2026-8644criticalCWE-290

IBM WebSphere Application Server is affected by an identity spoofing vulnerability

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.1epss 0.3%
exploitation probability
0.3%top 74% of all CVEs
observed exploitation
nono source reports it
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to identity spoofing.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H