CVE-2026-8644Disclosure(ibm / websphere_application_server)

MEDIUMCVSS 9.1 · CRITICAL

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

Patch ibm websphere_application_server systems immediately
Assume compromise if assets are exposed

Recommended action window: Immediate (within 24h)

NVD description

IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to identity spoofing.

ibm CVEs Back to dashboard

4.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://www.ibm.com/support/pages/node/7274740

Weakness type (CWE)

CWE-290

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

websphere_application_server

Threat summary

Active exploitation appears in 1 classified signals
Patch or workaround signal is available
8 mentions across 6 observed days
Momentum state: stable

What's happening

Active exploitation reported across 1 signal
Patch or workaround mentioned in 4 signals
Technical details provided in 7 signals
Disclosure: 4 classified signals
Peaked 5d ago at 2 mentions (2026-06-01); latest day: 1
8 total mentions across 6 days

Affected systems

Vendors

ibm

Products

websphere_application_server

Deep dive

Activity timeline8 mentions / 6d

Signal classification3 categories

Disclosure

450.0%

Patch

337.5%

Active Exploitation

112.5%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-06-01	2	Disclosure1Patch1
2026-06-02	1	Patch1
2026-06-04	2	Active Exploitation1Patch1
2026-06-07	1	Disclosure1
2026-06-15	1	Disclosure1
2026-06-23	1	Disclosure1

Full discourse8 posts

CERT-PY@CERTpy123d
Disclosure
⚠️ Vulnerabilidades en productos IBM ❗ CVE-2026-9319 ❗ CVE-2026-9311 ❗ CVE-2026-8644 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-ibm-5/ https://t.co/ajjAPrqGo2
Post summary
The post announces three IBM product CVEs and links to external resources for more information, but provides no additional technical or exploit details.
01001110
6.7K followersView on X
كاسبر سكاي@KasperskyDev131d
Disclosure
آي بي إم تكشف ثلاث ثغرات حرجة في خادم تطبيقاتها تشمل انتحال الهوية وتنفيذ كود عن بُعد. المنتج : IBM WebSphere Application Server 8.5 / 9.0 المعرّفات : CVE-2026-8644 CVE-2026-9311 CVE-2026-9319 درجة الخطورة : 9.0 - 9.1 Critical #CVE #IBM #WebSphere #CyberSecurity
Post summary
IBM has announced three new critical CVEs (CVE‑2026‑8644, CVE‑2026‑9311, CVE‑2026‑9319) targeting WebSphere Application Server 8.5/9.0, noting identity impersonation and remote code execution risks with CVSS scores of 9.0–9.1.
11000227
40.0K followersView on X
BnSnK@BunSnack134d
Patch
IBM WebSphere triple critical: CVE-2026-8644 (identity spoofing 9.1) + 2 RCE (both 9.0). Unauthenticated, network-exploitable. Interim fixes available but rollups not until Q3. Patch now.
Post summary
Three critical IBM WebSphere CVEs are disclosed—two RCEs and one identity spoofing—each with high CVSS scores, and vendor has issued interim patches while full rollup patches are slated for Q3.
000206
6 followersView on X
Orizon@OrizonCyber137d
Patch
🚨 CVE-2026-8644 — CVSS 9.1/10 █████████░ IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to identity spoofing. Severity: CRITICAL Patch now. #cybersecurity #CVE https://t.co/eQcu9eVYdb
Post summary
IBM WebSphere Application Server 9.0 and 8.5 are vulnerable to CVE-2026-8644, enabling identity spoofing; a patch has been released.
10010113
47 followersView on X
CCB Alert@CCBalert136d
Patch
Warning: #IBM patched several vulnerabilities in #WebSphere Application Server. The four most critical are CVE-2026-9319, CVE-2026-9311, CVE-2026-9330 & CVE-2026-8644 with CVSS scores up to 9.1. Affected versions may face high integrity and availability impact. #Patch #Patch
Post summary
IBM has released patches for four high‑severity WebSphere Application Server vulnerabilities (CVE‑2026‑9319, 9311, 9330, 8644) with CVSS scores up to 9.1, addressing potential integrity and availability impacts.
01000299
7.2K followersView on X
IntegSec@integ_sec115d
Disclosure
CVE-2026-8644: IBM WebSphere Application Server Identity Spoofing Bug - What It Means for Your Business and How to Respond https://hubs.li/Q04mkHLf0
Post summary
The text announces IBM WebSphere Application Server’s CVE-2026-8644, describing it as an identity spoofing bug, but does not provide evidence of PoC, active exploitation, or patch information.
0000038
31 followersView on X
NerdieNews@NewsNerdie134d
Active Exploitation
⚠️ IBM WebSphere CVEs (CVE-2026-8644, CVE-2026-9311, CVE-2026-9319) are being exploited in the wild, allowing attackers to spoof identities and execute remote code. Patch now to prevent breaches. #NerdieNews #CyberSecurity #Vulnerability https://t.co/VCbrml9gs7
Post summary
The post claims that IBM WebSphere CVEs (CVE‑2026‑8644, CVE‑2026‑9311, CVE‑2026‑9319) are currently being exploited in the wild, enabling identity spoofing and remote code execution, and urges immediate patching to stop potential breaches.
0000050
65 followersView on X
Matthias Knäpper@knaepp137d
Disclosure
IBM WebSphere Application Server is affected by an identity spoofing vulnerability (CVE-2026-8644) https://tinyurl.com/28jknrc6
Post summary
The text announces the presence of an identity spoofing vulnerability (CVE-2026-8644) in IBM WebSphere Application Server, providing no additional exploit or remediation details.
0000039
109 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	ibm	websphere_application_server	-	-	-

Explore more

Back to dashboard ibm CVEs websphere_application_server vulnerabilities

What researchers are saying

CVE-2026-8644

Orizon[verified]@OrizonCyberPatch

IBM WebSphere Application Server 9.0 and 8.5 are vulnerable to CVE-2026-8644, enabling identity spoofing; a patch has been released.

IntegSec[verified]@integ_secDisclosure

The text announces IBM WebSphere Application Server’s CVE-2026-8644, describing it as an identity spoofing bug, but does not provide evidence of PoC, active exploitation, or patch information.

CERT-PY@CERTpyDisclosure

The post announces three IBM product CVEs and links to external resources for more information, but provides no additional technical or exploit details.

كاسبر سكاي@KasperskyDevDisclosure

IBM has announced three new critical CVEs (CVE‑2026‑8644, CVE‑2026‑9311, CVE‑2026‑9319) targeting WebSphere Application Server 8.5/9.0, noting identity impersonation and remote code execution risks with CVSS scores of 9.0–9.1.

BnSnK@BunSnackPatch

Three critical IBM WebSphere CVEs are disclosed—two RCEs and one identity spoofing—each with high CVSS scores, and vendor has issued interim patches while full rollup patches are slated for Q3.

CCB Alert@CCBalertPatch

IBM has released patches for four high‑severity WebSphere Application Server vulnerabilities (CVE‑2026‑9319, 9311, 9330, 8644) with CVSS scores up to 9.1, addressing potential integrity and availability impacts.

NerdieNews@NewsNerdieActive Exploitation

The post claims that IBM WebSphere CVEs (CVE‑2026‑8644, CVE‑2026‑9311, CVE‑2026‑9319) are currently being exploited in the wild, enabling identity spoofing and remote code execution, and urges immediate patching to stop potential breaches.

Matthias Knäpper@knaeppDisclosure

The text announces the presence of an identity spoofing vulnerability (CVE-2026-8644) in IBM WebSphere Application Server, providing no additional exploit or remediation details.