PT-2026-113349 · Ibm · Ibm Websphere Application Server+1

CVE-2026-101294

·

Published

2026-10-13

·

Updated

2026-10-13

CVSS v3.1

8.7

High

VectorAV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass cryptographic signature verification due to improper verification of cryptographic signature.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-325

Related Identifiers

CVE-2026-101294

Affected Products

Ibm Websphere Application Server
Ibm Websphere Application Server Liberty