vulnerability context

CVE-2026-9072

CVSS 8.1 HIGHEPSS 33%CWE-94OTX 2 pulses

IBM WebSphere Application Server and IBM WebSphere Application Server Liberty - when using Intelligent Management with the WebSphere WebServer Plug-in component - are vulnerable to remote code execution and denial of service. This vulnerability can be exploited when an attacker impersonates backend servers and sends crafted responses to the plug-in.

Published 2026-06-22 · last modified 2026-06-24

details

CISA KEV status: Not in catalog
CVSS v3: 8.1 / HIGH
CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 33% percentile (score 0.0041)
CWE: CWE-94
OTX pulses: 2 total, 0 recent

View on NVD → · cve.org

source mentions 2

[Security Cyber] 🚨 ALERT: CVE-2026-9072 CVSS 8.1/10 📋 WHAT IT IS: IBM i 7.6, 7.5, 7.4, and 7.3, IBM WebSphere Application...Bluesky · 1d ago
[CVE Alerts ] CVE-2026-9072 - IBM i is Affected By Denial of Service, HTTP Request Smuggling, and Remote Code Execution Vulnerabil...Bluesky · 2d ago

source consensus

Bluesky2×

Want the 3-bullet summary of CVE-2026-9072, plus webhook alerts when KEV is updated? Pro is $10/mo.

Open in reader See Pro →