High severity7.3NVD Advisory· Published Jun 22, 2026· Updated Jun 23, 2026
CVE-2026-10845
CVE-2026-10845
Description
IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to bypass authentication and gain unauthorized access to JAX-WS applications.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*range: >=8.5.0.0,<8.5.5.30
- (no CPE)range: 8.5, 9.0
Patches
Vulnerability mechanics
References
1- www.ibm.com/support/pages/node/7276597nvdVendor Advisory
News mentions
1- IBM WebSphere: Eight Vulnerabilities Including DoS, SSRF, and RCE Disclosed TogetherVypr Intelligence · Jun 22, 2026