CVE-2026-10852 Websphere Application Server is Affected By a Denial of Service

🗓️ 22 Jun 2026 19:32:28Reported by ibmType

CVE-2026-10852 Denial of service in WebSphere Application Server Liberty via crafted requests on the WebServer plug-in.

Reporter	Title	Published	Views	Family All 25
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty (bundled with IBM WebSphere Hybrid Edition) are affected by multiple vulnerabilities when using Web Server Plug-ins(CVE-2026-9072, CVE-2026-8858, CVE-2026-10852)	2 Jul 202623:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities have been identified in IBM WebSphere Application Server and WebSphere Application Server Liberty shipped with IBM WebSphere Remote Server	23 Jun 202616:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities when using the Web Server Plug-ins (CVE-2026-9072, CVE-2026-8858, CVE-2026-10852)	16 Jun 202612:50	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security vulnerabilities have been identified in IBM WebSphere Application Server traditional, WebSphere Liberty profile, IBM HTTP Server its WebSphere plugins shipped with IBM Business Automation Workflow	18 Jun 202620:12	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities have been identified in IBM WebSphere Application Server and WebSphere Application Server Liberty shipped with IBM WebSphere Remote Server	23 Jun 202615:57	–	ibm
IBM Security Bulletins	Security Bulletin: WebSphere Application Server traditional shipped with IBM Tivoli System Automation Application Manager is affected by remote code execution and denial of service (CVE-2026-10852, CVE-2026-8858, CVE-2026-9072)	15 Jul 202611:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i is Affected By Denial of Service, HTTP Request Smuggling, and Remote Code Execution Vulnerabilities in IBM WebSphere Application Server Liberty [CVE-2026-10852, CVE-2026-8858, CVE-2026-9072, CVE-2026-8633, CVE-2026-8620]	22 Jun 202613:42	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of WebSphere Application Server Liberty, IBM Tivoli Application Dependency Discovery Manager is affected by multiple vulnerabilities	23 Jul 202606:46	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified in IBM WebSphere Application Server used by IBM Rational ClearQuest	27 Jul 202620:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server shipped with Jazz for Service Management (JazzSM) is affected by multiple vulnerabilities when using the Web Server Plug-ins	18 Jun 202607:17	–	ibm

[
  {
    "vendor": "IBM",
    "product": "WebSphere Application Server",
    "versions": [
      {
        "status": "affected",
        "version": "8.5"
      },
      {
        "status": "affected",
        "version": "9.0"
      }
    ],
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:2.3:a:ibm:websphere_application_server:8.5:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:websphere_application_server:9.0:*:*:*:*:*:*:*"
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/pages/node/7276560

09 Jul 2026 19:54Current

CVSS 3.15.9

EPSS0.00293

CWE-476