CVE-2026-16184

CVSS Score & Metrics

Base Score

7.0 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H                                    

IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to bypass authentication by sending a crafted unauthenticated request.

Published Date

July 28, 2026

Last Modified

July 28, 2026

CWE ID

CWE-862

Source

NVD

Vendor

IBM

Product

WebSphere Application Server