VulnSocial

CVE-2026-9311Disclosure(ibm / websphere_application_server)

MEDIUMCVSS 9.0 · CRITICAL

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

  • Patch ibm websphere_application_server systems immediately
  • Assume compromise if assets are exposed

Recommended action window: Immediate (within 24h)

NVD description

IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to remote code execution caused by the bypass of security controls.

ibm CVEsBack to dashboard
4.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-94

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • websphere_application_server

Threat summary

  • Active exploitation appears in 1 classified signals
  • Patch or workaround signal is available
  • 7 mentions across 6 observed days
  • Momentum state: stable

What's happening

  • Active exploitation reported across 1 signal
  • Patch or workaround mentioned in 3 signals
  • Technical details provided in 6 signals
  • Disclosure: 3 classified signals
  • Peaked 5d ago at 2 mentions (2026-06-01); latest day: 1
  • 7 total mentions across 6 days

Affected systems

Vendors
ibm
Products
websphere_application_server

Deep dive

Activity timeline7 mentions / 6d
01122Mentions · 2026-06-01: 2Mentions · 2026-06-02: 1Mentions · 2026-06-04: 1Mentions · 2026-06-07: 1Mentions · 2026-06-15: 1Mentions · 2026-06-23: 1Active Exploitation · 2026-06-04: 1Patch / Workaround · 2026-06-01: 1Patch / Workaround · 2026-06-02: 1Patch / Workaround · 2026-06-04: 1Technical Details · 2026-06-01: 2Technical Details · 2026-06-02: 1Technical Details · 2026-06-04: 1Technical Details · 2026-06-07: 1Technical Details · 2026-06-23: 106-0106-0206-0406-0706-1506-23
Signal classification4 categories
Disclosure
342.9%
Patch
228.6%
Active Exploitation
114.3%
General
114.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-06-012
Disclosure1Patch1
2026-06-021
Patch1
2026-06-041
Active Exploitation1
2026-06-071
Disclosure1
2026-06-151
Disclosure1
2026-06-231
General1
Full discourse7 posts
  • CERT-PY@CERTpy
    Disclosure

    ⚠️ Vulnerabilidades en productos IBM ❗ CVE-2026-9319 ❗ CVE-2026-9311 ❗ CVE-2026-8644 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-ibm-5/ https://t.co/ajjAPrqGo2

    Post summary

    The tweet lists three IBM CVEs and links to an external page for more information, but does not provide any technical or exploit details.

    01001110
    6.7K followersView on X
  • كاسبر سكاي@KasperskyDev
    Disclosure

    آي بي إم تكشف ثلاث ثغرات حرجة في خادم تطبيقاتها تشمل انتحال الهوية وتنفيذ كود عن بُعد. المنتج : IBM WebSphere Application Server 8.5 / 9.0 المعرّفات : CVE-2026-8644 CVE-2026-9311 CVE-2026-9319 درجة الخطورة : 9.0 - 9.1 Critical #CVE #IBM #WebSphere #CyberSecurity

    Post summary

    IBM has announced three critical vulnerabilities (CVE‑2026‑8644, CVE‑2026‑9311, CVE‑2026‑9319) in WebSphere Application Server, affecting identity spoofing and remote code execution, with severity scores ranging from 9.0 to 9.1.

    11000227
    40.0K followersView on X
  • CCB Alert@CCBalert
    Patch

    Warning: #IBM patched several vulnerabilities in #WebSphere Application Server. The four most critical are CVE-2026-9319, CVE-2026-9311, CVE-2026-9330 & CVE-2026-8644 with CVSS scores up to 9.1. Affected versions may face high integrity and availability impact. #Patch #Patch

    Post summary

    IBM has released patches for four critical WebSphere Application Server vulnerabilities (CVE‑2026‑9319, CVE‑2026‑9311, CVE‑2026‑9330, CVE‑2026‑8644) with high CVSS scores, addressing significant integrity and availability risks.

    01000299
    7.2K followersView on X
  • Orizon@OrizonCyber
    Patch

    🚨 CVE-2026-9311 — CVSS 9/10 █████████░ IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to remote code execution caused by the bypass of security... Severity: CRITICAL Patch now. #cybersecurity #CVE https://t.co/mRbEISGr3f

    Post summary

    CVE‑2026‑9311 is a critical remote code execution flaw in IBM WebSphere Application Server 9.0 and 8.5, rated CVSS 9/10, and a patch is urgently required.

    10000107
    47 followersView on X
  • IntegSec@integ_sec
    General

    CVE-2026-9311: IBM WebSphere Application Server Remote Code Execution Vulnerability - What It Means for Your Business and How to Respond https://hubs.li/Q04mjwNK0

    Post summary

    The snippet refers to a remote code execution vulnerability in IBM WebSphere Application Server (CVE-2026-9311) but offers no evidence of PoC, exploit code, active exploitation, or patch details—it appears to be a general informational advisory.

    0000041
    31 followersView on X
  • NerdieNews@NewsNerdie
    Active Exploitation

    ⚠️ IBM WebSphere CVEs (CVE-2026-8644, CVE-2026-9311, CVE-2026-9319) are being exploited in the wild, allowing attackers to spoof identities and execute remote code. Patch now to prevent breaches. #NerdieNews #CyberSecurity #Vulnerability https://t.co/VCbrml9gs7

    Post summary

    The tweet alerts that IBM WebSphere CVEs CVE‑2026‑8644, CVE‑2026‑9311, and CVE‑2026‑9319 are actively exploited to spoof identities and execute remote code, and it urges immediate patching to prevent breaches.

    0000050
    65 followersView on X
  • Matthias Knäpper@knaepp
    Disclosure

    IBM WebSphere Application Server is affected by remote code execution (CVE-2026-9311, CVE-2026-9330) https://tinyurl.com/282ddzef

    Post summary

    IBM WebSphere Application Server is vulnerable to remote code execution through CVE‑2026‑9311 and CVE‑2026‑9330.

    0000045
    109 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appibmwebsphere_application_server---

Explore more

Back to dashboardibm CVEswebsphere_application_server vulnerabilities