Veille CVE

Lundi 22 juin 2026

5 CVE sur 8

  1. CVE-2026-10852 7.5 Élevée

    IBM WebSphere Application Server · Ibm i

    IBM WebSphere Application Server and IBM WebSphere Application Server Liberty are vulnerable to denial of service in the WebSphere WebServer Plug-in component when an attacker can pass crafted requests to the web server.

  2. CVE-2026-9320 7.5 Élevée

    IBM WebSphere Application Server · IBM WebSphere Application Server - Liberty

    IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources.

  3. CVE-2026-9071 7.5 Élevée

    IBM WebSphere Application Server · IBM WebSphere Application Server - Liberty

    IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources.

  4. CVE-2026-8858 8.8 Élevée

    IBM WebSphere Application Server · Ibm i

    IBM WebSphere Application Server and IBM WebSphere Application Server Liberty are vulnerable to remote code execution and denial of service in the WebSphere Web Server Plug-in component. This vulnerability can be exploited when an attacker impersonates the application server and sends crafted responses to the plug-in.

  5. CVE-2026-10845 7.3 Élevée

    IBM WebSphere Application Server

    IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to bypass authentication and gain unauthorized access to JAX-WS applications.