WebSphere Application Server
- Software type
- Application server
- Total vulnerabilities (90 days)
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 10/19/2026, WebSphere Application Server recorded 43 security vulnerabilities in the last 90 days, of which 19 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of WebSphere Application Server and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-101294IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a missing cryptographic stepCVE-2026-105442IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a deserialization of untrusted dataCVE-2026-93907IBM WebSphere Application Server is affected by a bypass authentication vulnerabilityCVE-2026-95680IBM WebSphere Application Server is affected by an authorization bypassCVE-2026-103499IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-101294IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a missing cryptographic step | Exploitation statusNot exploited | FixYes |
| SeverityHigh |
CVE-2026-105442IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a deserialization of untrusted data | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityHigh |
|---|
CVE-2026-93907IBM WebSphere Application Server is affected by a bypass authentication vulnerability | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityHigh |
|---|
CVE-2026-95680IBM WebSphere Application Server is affected by an authorization bypass | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityHigh |
|---|
CVE-2026-103499IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityHigh |
|---|
CVE-2026-11711IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities | Exploitation statusNot exploited | FixYes | Published09/18/2026 | SeverityMedium |
|---|
CVE-2026-11710IBM WebSphere Application Server is affected by an HTTP request smuggling vulnerability | Exploitation statusNot exploited | FixYes | Published09/18/2026 | SeverityMedium |
|---|
CVE-2026-11545IBM WebSphere Application Server is affected by a privilege escalation | Exploitation statusNot exploited | FixYes | Published09/18/2026 | SeverityLow |
|---|
CVE-2026-11540IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities | Exploitation statusNot exploited | FixYes | Published09/18/2026 | SeverityMedium |
|---|
CVE-2026-11539IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities | Exploitation statusNot exploited | FixYes | Published09/18/2026 | SeverityMedium |
|---|
181 Results | Page 1 of 19