CVE-2026-8400
IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty Continuous delivery has a flaw in the ORB component in IBM SDK, Java Technology Edition, may allow a malicious IIOP server to induce loading and instantation of arbitrary classes.
- Published Aug 5, 2026
- CVSS 9.8 critical
- 0.5% chance of exploitation in the next 30 days (EPSS)
Affected software
In the news
- Multiple vulnerabilities in IBM products CERT-FR ·