CVE-2026-14974 in WebSphere Application Server

Résumé

par MITRE • 29/07/2026

IBM WebSphere Application Server 8.5, and 9.0 traditional could allow a remote attacker to execute arbitrary code caused by unsafe deserialization of untrusted data.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsable: Ibm
• Réserver: 07/07/2026
• Divulgation: 29/07/2026
• Modérer: accepté
• Entrée: VDB-383996
• CPE: prêt
• CWE: CWE-502 (confirmé)
• CVSS: 7.4 (VulDB)
• EPSS: 0.00366
• KEV: non
• Activités: très faible
• Secteur: Insurance, Finance, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-14974
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-14974
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-14974/