CVE-2026-10842 HIGH

CVE-2026-10842: IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a security bypass vulnerability

Vendor Ibm
Product WebSphere Application Server
Weakness CWE-289
Published July 30, 2026
Last update July 30, 2026
View on NVD All CVEs

CVSS base score

7.5/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 Traditional and Liberty could allow a remote attacker to bypass security constraints.

Key dates

02Disclosure timeline

July 30, 2026 CVE published
July 30, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-2098 Download Manager <= 3.2.89 - Improper Authorization via protectMediaLibrary CVE-2026-8457 WooCommerce - Social Login <= 2.8.7 - Unauthenticated Authentication Bypass via Forged Apple 'id_token' JWT CVE-2024-11283 WP JobHunt <= 7.1 - Authentication Bypass to Candidate CVE-2026-9701 Eventer <= 4.4.2 - Insecure Password Reset Mechanism to Unauthenticated Privilege Escalation CVE-2025-13613 Elated Membership <= 1.2 - Authentication Bypass via Social Login