Veille CVE

Jeudi 10 septembre 2026

5 CVE

Critique 0 Élevée 3 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « IBM WebSphere Application Server » ✕
  1. CVE-2026-9667 5.3 Moyenne

    IBM WebSphere Application Server

    IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to server-side request forgery (SSRF) that could allow a remote, unauthenticated attacker to cause the server to send outbound requests to arbitrary endpoints.

  2. CVE-2026-9327 8.1 Élevée

    IBM WebSphere Application Server

    IBM WebSphere Application Server 9.0, and 8.5 could allow an authenticated user with a low-privilege administrative role to modify security configuration. This could result in information disclosure or denial of service.

  3. CVE-2026-9176 7.1 Élevée

    IBM WebSphere Application Server

    IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a security bypass due to improper authentication controls. A local attacker could exploit this vulnerability to escalate privileges and gain unauthorized access to protected resources.

  4. CVE-2026-9338 5.3 Moyenne

    IBM WebSphere Application Server

    IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to trigger excessive resource consumption, potentially leading to reduced availability of the affected service.

  5. CVE-2026-9336 7.5 Élevée

    IBM WebSphere Application Server

    IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a denial of service, caused by sending a specially-crafted HTTP request to an administrative endpoint. A remote attacker could exploit this vulnerability to cause the server to exhaust filesystem space.