CVE-2026-11536

CVSS Score & Metrics

Base Score

8.5 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H                                    

IBM WebSphere Application Server 9.0, and 8.5 is affected by a remote code execution vulnerability in the SOAP/JMX connector.

Published Date

July 30, 2026

Last Modified

July 30, 2026

CWE ID

CWE-502

Source

NVD

Vendor

IBM

Product

WebSphere Application Server