Remote Information Disclosure in IBM WebSphere Application Server

CVE-2026-11540

What is CVE-2026-11540?

IBM WebSphere Application Server versions 9.0 and 8.5 are susceptible to a vulnerability that enables a remote attacker to exploit the FileTransfer servlet. Through this exploitation, an attacker could gain unauthorized access to sensitive information contained in the file system, potentially leading to further compromises if the exposed data is leveraged.

References