CVE-2026-8400General(ibm / websphere_application_server)

LOWCVSS 9.8 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty Continuous delivery has a flaw in the ORB component in IBM SDK, Java Technology Edition, may allow a malicious IIOP server to induce loading and instantation of arbitrary classes.

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-470

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • websphere_application_server

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • General: 2 classified signals
  • 2 total mentions across 1 day

Affected systems

Vendors
Products
websphere_application_server

3 versions affected across 1 product

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-08-05: 2Technical Details · 2026-08-05: 108-05
Signal classification1 categories
General
2100.0%
Referenced assets3 URLs
Full discourse2 posts
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-8400 Remote Code Execution in IBM WebSphere Application Server via ORB ... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-8400 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1

    Post summary

    The message simply announces CVE‑2026‑8400, notes it is a Remote Code Execution vulnerability in IBM WebSphere, and supplies a link to more information without providing PoCs, exploitation evidence, or patches.

    0000090
    4.1K followersView on X
  • VulDB 🛡@vuldb
    General

    There is a new vulnerability with elevated criticality in IBM WebSphere Application Server (CVE-2026-8400) https://vuldb.com/vuln/386266

    Post summary

    The post simply announces a new high‑critical IBM WebSphere Application Server vulnerability (CVE-2026-8400) without providing any technical details, exploits, or remedial information.

    0000097
    2.3K followersView on X
CPE platform detail3 entries

3 of 3 entries

PartVendorProductVersionTarget SWTarget HW
Appibmwebsphere_application_server---
Appibmwebsphere_application_server8.5.0.0--
Appibmwebsphere_application_server9.0.0.0--

Explore more