AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

IBMCVE-2026-16190

IBM WebSphere Application Server: missing authorization

IBM

CVE-2026-16190 · Published Sep 14, 2026 · updated Sep 16, 2026

Low3.1
No fix yet
IBM advisory

IBM WebSphere Application Server 9.0, and 8.5 is affected by an authorization bypass vulnerability.

Affected versions

PackageAffectedFixed in
WebSphere Application Server
Product
<= 9.0No fix yet
<= 8.5No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-862

More IBM advisories

All IBM
Medium 6.8Sep 14IBM MQ: information disclosureCVE-2026-13265no fix yetHigh 7.1Sep 14IBM Business Automation Workflow containers and traditional: XML external entityCVE-2026-12756no fix yetMedium 5.4Sep 14IBM Cloud Pak for Business Automation: missing authorizationCVE-2026-12758no fix yetMedium 6.5Sep 14IBM Cloud Pak for Business Automation: denial of serviceCVE-2026-12759no fix yetCritical 9.6Sep 14IBM Langflow OSS: server-side request forgeryCVE-2026-12944no fix yetMedium 4.3Sep 14IBM Sterling Secure Proxy: improper authorizationCVE-2026-75792no fix yet