CVE-2026-10845 IBM WebSphere Application Server is affected by an authentication bypass vulnerability

🗓️ 22 Jun 2026 14:43:16Reported by ibmType

IBM WebSphere Application Server 8.5 and 9.0 have an authentication bypass enabling remote access.

Reporter	Title	Published	Views	Family All 11
IBM Security Bulletins	Security Bulletin: Multiple Security vulnerabilities have been identified in IBM WebSphere Application Server traditional, WebSphere Liberty profile, IBM HTTP Server its WebSphere plugins shipped with IBM Business Automation Workflow	18 Jun 202620:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server shipped with Jazz for Service Management (JazzSM) is affected by an authentication bypass vulnerability	18 Jun 202607:19	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities have been identified in WebSphere Application Server shipped with WebSphere Service Registry and Repository (CVE-2026-10845, CVE-2026-8646, CVE-2026-9320, CVE-2026-9071 and CVE-2026-9006)	17 Jun 202617:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server is affected by an authentication bypass vulnerability (CVE-2026-10845)	16 Jun 202615:21	–	ibm
ATTACKERKB	CVE-2026-10845	22 Jun 202614:43	–	attackerkb
CVE	CVE-2026-10845	22 Jun 202614:43	–	cve
EUVD	EUVD-2026-38288	22 Jun 202618:34	–	euvd
NVD	CVE-2026-10845	22 Jun 202616:16	–	nvd
Positive Technologies	PT-2026-51325	22 Jun 202600:00	–	ptsecurity
Vulnrichment	CVE-2026-10845 IBM WebSphere Application Server is affected by an authentication bypass vulnerability	22 Jun 202614:43	–	vulnrichment

[
  {
    "vendor": "IBM",
    "product": "WebSphere Application Server",
    "versions": [
      {
        "status": "affected",
        "version": "8.5.0",
        "lessThanOrEqual": "7.0.2 Interim Fix 035",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "9.0.0",
        "lessThanOrEqual": "7.0.3 Interim Fix 017",
        "versionType": "semver"
      }
    ],
    "cpes": [
      "cpe:2.3:a:ibm:websphere_application_server:8.5:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:websphere_application_server:8.5.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:websphere_application_server:9.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:websphere_application_server:9.0.0:*:*:*:*:*:*:*"
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/pages/node/7276597

22 Jun 2026 14:43Current

CWE-287