Security Bypass Vulnerability in IBM WebSphere Application Server
CVE-2026-9176

6.7MEDIUM

Key Information:

Vendor

IBM
Status
Websphere Application Server
Vendor
CVE Published:
10 September 2026

What is CVE-2026-9176?

IBM WebSphere Application Server versions 9.0 and 8.5 contain a vulnerability that allows local attackers to bypass authentication controls. This lapse in security can lead to privilege escalation, thereby granting unauthorized access to sensitive resources that should be protected. It is essential for users of these versions to apply the latest patches to mitigate the risks associated with this vulnerability.

Affected Version(s)

WebSphere Application Server 9.0

WebSphere Application Server 8.5

References

https://www.ibm.com/support/pages/node/7286610
vendor-advisorypatch

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.