Authentication Bypass Vulnerability in IBM WebSphere Application Server
CVE-2026-16435

5.9MEDIUM

Key Information:

Vendor

IBM
Status
Websphere Application Server
Vendor
CVE Published:
14 September 2026

What is CVE-2026-16435?

IBM WebSphere Application Server versions 9.0 and 8.5 face an authentication bypass vulnerability arising from the use of XD or Intelligent-Management features. This creates a potential security risk, allowing unauthorized access to sensitive functionalities and data. Organizations utilizing these versions should implement the recommended patches to secure their applications and mitigate the risks associated with this vulnerability.

Affected Version(s)

WebSphere Application Server 9.0

WebSphere Application Server 8.5

References

https://www.ibm.com/support/pages/node/7286610
vendor-advisorypatch

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.