Code Injection in IBM WebSphere Application Server - CVE-2026-9311
Published: June 3, 2026
Vulnerability identifier: #VU133294
CSH Severity: High
CVSS v4: 7.1 [CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H]
CVE-ID: CVE-2026-9311
CWE-ID: CWE-94
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to bypass of security controls. A remote attacker can send a specially crafted request and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
Affected software
IBM WebSphere Application Server
Enterprise Application Runtimes
Tivoli Network Manager IP Edition
Cloud Pak for Applications
WebSphere Hybrid Edition
IBM Tivoli Netcool Configuration Manager
Tivoli Composite Application Manager for Application Diagnostics
Jazz for Service Management
Financial Transaction Manager for ACH Services and Check Services
IBM Tivoli System Automation Application Manager
IBM Security Guardium Key Lifecycle Manager (GKLM)
IBM Tivoli Monitoring
WebSphere Remote Server
WebSphere Service Registry and Repository
IBM Rational ClearQuest
IBM Business Automation Workflow
Enterprise Application Runtimes
Tivoli Network Manager IP Edition
Cloud Pak for Applications
WebSphere Hybrid Edition
IBM Tivoli Netcool Configuration Manager
Tivoli Composite Application Manager for Application Diagnostics
Jazz for Service Management
Financial Transaction Manager for ACH Services and Check Services
IBM Tivoli System Automation Application Manager
IBM Security Guardium Key Lifecycle Manager (GKLM)
IBM Tivoli Monitoring
WebSphere Remote Server
WebSphere Service Registry and Repository
IBM Rational ClearQuest
IBM Business Automation Workflow
How to mitigate CVE-2026-9311
Install updates from vendor's website.
IBM WebSphere Application Server - addressed in versions 8.5.5.30, 9.0.5.29
IBM Tivoli Monitoring - update to 6.3.0.7 Service Pack 5
IBM Tivoli Monitoring - update to 6.3.0.7 Service Pack 5
External References
Related Security Bulletins
- Code Injection in IBM WebSphere Application Server
- Multiple vulnerabilities in IBM WebSphere Remote Server
- Multiple vulnerabilities in IBM Buinses Automation Workflow
- Multiple vulnerabilities in IBM Jazz for Service Management
- Multiple vulnerabilities in IBM Financial Transaction Manager for Check Services (Multiplatforms)
- Multiple vulnerabilities in IBM WebSphere Service Registry and Repository
- Multiple vulnerabilities in IBM WebSphere Hybrid Edition
- Multiple vulnerabilities in IBM Enterprise Application Runtimes
- Multiple vulnerabilities in IBM Cloud Pak for Applications
- Multiple vulnerabilities in IBM Tivoli Composite Application Manager for Application Diagnostics
- Multiple vulnerabilities in IBM Guardium Key Lifecycle Manager (SKLM/GKLM)
- Multiple vulnerabilities in IBM Tivoli Network Manager IP Edition
- Multiple vulnerabilities in IBM Tivoli Netcool Configuration Manager
- Multiple vulnerabilities in IBM Tivoli Monitoring
- Multiple vulnerabilities in IBM Rational ClearQuest
- Multiple vulnerabilities in IBM Tivoli System Automation Application Manager