CVE-2026-9319Patch(ibm / websphere_application_server)

MEDIUMCVSS 9.0 · CRITICAL

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

Patch ibm websphere_application_server systems immediately
Assume compromise if assets are exposed

Recommended action window: Immediate (within 24h)

NVD description

IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to potential remote code execution due to deserialization of untrusted data via JAX-WS endpoints with WS-Security.

ibm CVEs Back to dashboard

4.3/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://www.ibm.com/support/pages/node/7274738

Weakness type (CWE)

CWE-502

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

websphere_application_server

Threat summary

Active exploitation appears in 1 classified signals
Patch or workaround signal is available
9 mentions across 8 observed days
Momentum state: stable

What's happening

Active exploitation reported across 1 signal
Patch or workaround mentioned in 4 signals
Technical details provided in 7 signals
Disclosure: 3 classified signals
General: 2 classified signals
Peaked 7d ago at 2 mentions (2026-06-02); latest day: 1
9 total mentions across 8 days

Affected systems

Vendors

ibm

Products

websphere_application_server

Deep dive

Activity timeline9 mentions / 8d

Signal classification4 categories

Patch

333.3%

Disclosure

333.3%

General

222.2%

Active Exploitation

111.1%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-06-02	2	Patch2
2026-06-03	1	Disclosure1
2026-06-04	1	Active Exploitation1
2026-06-07	1	Disclosure1
2026-06-08	1	Patch1
2026-06-15	1	General1
2026-06-22	1	Disclosure1
2026-06-23	1	General1

Full discourse9 posts

CERT-PY@CERTpy123d
General
⚠️ Vulnerabilidades en productos IBM ❗ CVE-2026-9319 ❗ CVE-2026-9311 ❗ CVE-2026-8644 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-ibm-5/ https://t.co/ajjAPrqGo2
Post summary
The tweet merely lists three IBM product CVEs and links to a source for further information, without providing details on exploitation, patches, or technical aspects.
01001110
6.7K followersView on X
كاسبر سكاي@KasperskyDev131d
Disclosure
آي بي إم تكشف ثلاث ثغرات حرجة في خادم تطبيقاتها تشمل انتحال الهوية وتنفيذ كود عن بُعد. المنتج : IBM WebSphere Application Server 8.5 / 9.0 المعرّفات : CVE-2026-8644 CVE-2026-9311 CVE-2026-9319 درجة الخطورة : 9.0 - 9.1 Critical #CVE #IBM #WebSphere #CyberSecurity
Post summary
IBM announced three critical vulnerabilities (CVE‑2026‑8644, CVE‑2026‑9311, CVE‑2026‑9319) affecting WebSphere Application Server, noting impersonation and remote code execution with CVSS scores of 9.0‑9.1.
11000227
40.0K followersView on X
Orizon@OrizonCyber137d
Patch
🚨 CVE-2026-9319 — CVSS 9/10 █████████░ IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to potential remote code execution due to deserialization... Severity: CRITICAL Patch now. #cybersecurity #CVE https://t.co/a4R22GbYYQ
Post summary
The tweet announces a critical remote code execution vulnerability in IBM WebSphere Application Server, provides a patch notice, and highlights technical details, but offers no PoC, exploit code, or evidence of active exploitation.
10010132
48 followersView on X
NCIIPC India@NCIIPC130d
Patch
Critical Remote Code Execution Vulnerability #CVE-2026-9319 impacts #IBM WebSphere Application Server. Apply Updates! https://www.ibm.com/support/pages/node/7274738
Post summary
A critical remote code execution vulnerability (CVE-2026-9319) affecting IBM WebSphere Application Server has been disclosed, and users are urged to apply vendor updates to mitigate the risk.
00010242
8.4K followersView on X
モーくん🐮｜WordPress × セキュリティ@accell_mo_kun135d
Disclosure
おはモー🐮 【木曜朝のCVE警戒5発】6月初週、大型脆弱性が連発モー🐮 🔴 Kirki CVE-2026-8206（CVSS 9.8、15万サイト） 🔴 Burst Statistics CVE-2026-8181（20万インストール） 🔴 Redis RCE CVE-2026-23479（2年潜伏のUse-After-Free） 🔴 IBM WebSphere CVE-2026-9319 🔴 M365 Android FlagLeft（トークン窃取） WP保守＋バックエンド連携の人は週次棚卸しタイミングだモー🐮 #おは戦80604jm🌴 #WordPressセキュリティ
Post summary
The post announces five newly disclosed CVEs with basic technical metrics but contains no PoC, exploit code, or patch information.
0001074
767 followersView on X
CCB Alert@CCBalert136d
Patch
Warning: #IBM patched several vulnerabilities in #WebSphere Application Server. The four most critical are CVE-2026-9319, CVE-2026-9311, CVE-2026-9330 & CVE-2026-8644 with CVSS scores up to 9.1. Affected versions may face high integrity and availability impact. #Patch #Patch
Post summary
IBM has released patches for four high‑severity vulnerabilities affecting WebSphere Application Server, including CVE‑2026‑9319, CVE‑2026‑9311, CVE‑2026‑9330 and CVE‑2026‑8644, with CVSS scores up to 9.1.
01000299
7.2K followersView on X
IntegSec@integ_sec115d
General
CVE-2026-9319: IBM WebSphere Application Server Deserialization Bug - What It Means for Your Business and How to Respond https://hubs.li/Q04mjvjg0
Post summary
The snippet references an IBM WebSphere deserialization vulnerability but lacks evidence of PoC, exploit code, active exploitation, or explicit patch information. Classification is general with low confidence.
0000033
31 followersView on X
Matthias Knäpper@knaepp116d
Disclosure
IBM WebSphere Application Server is affected by a remote code execution vulnerability (CVE-2026-9319) https://tinyurl.com/29az3z3e
Post summary
The statement announces that IBM WebSphere Application Server is affected by CVE‑2026‑9319, a remote code execution vulnerability, without providing any exploits, patches or PoC.
0000054
108 followersView on X
NerdieNews@NewsNerdie134d
Active Exploitation
⚠️ IBM WebSphere CVEs (CVE-2026-8644, CVE-2026-9311, CVE-2026-9319) are being exploited in the wild, allowing attackers to spoof identities and execute remote code. Patch now to prevent breaches. #NerdieNews #CyberSecurity #Vulnerability https://t.co/VCbrml9gs7
Post summary
The tweet announces that three IBM WebSphere CVEs are currently being exploited in the wild and urges immediate patching to prevent remote code execution and identity spoofing.
0000050
65 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	ibm	websphere_application_server	-	-	-

Explore more

Back to dashboard ibm CVEs websphere_application_server vulnerabilities

What researchers are saying

CVE-2026-9319

Orizon[verified]@OrizonCyberPatch

The tweet announces a critical remote code execution vulnerability in IBM WebSphere Application Server, provides a patch notice, and highlights technical details, but offers no PoC, exploit code, or evidence of active exploitation.

モーくん🐮｜WordPress × セキュリティ[verified]@accell_mo_kunDisclosure

The post announces five newly disclosed CVEs with basic technical metrics but contains no PoC, exploit code, or patch information.

IntegSec[verified]@integ_secGeneral

The snippet references an IBM WebSphere deserialization vulnerability but lacks evidence of PoC, exploit code, active exploitation, or explicit patch information. Classification is general with low confidence.

CERT-PY@CERTpyGeneral

The tweet merely lists three IBM product CVEs and links to a source for further information, without providing details on exploitation, patches, or technical aspects.

كاسبر سكاي@KasperskyDevDisclosure

IBM announced three critical vulnerabilities (CVE‑2026‑8644, CVE‑2026‑9311, CVE‑2026‑9319) affecting WebSphere Application Server, noting impersonation and remote code execution with CVSS scores of 9.0‑9.1.

NCIIPC India@NCIIPCPatch

A critical remote code execution vulnerability (CVE-2026-9319) affecting IBM WebSphere Application Server has been disclosed, and users are urged to apply vendor updates to mitigate the risk.

CCB Alert@CCBalertPatch

IBM has released patches for four high‑severity vulnerabilities affecting WebSphere Application Server, including CVE‑2026‑9319, CVE‑2026‑9311, CVE‑2026‑9330 and CVE‑2026‑8644, with CVSS scores up to 9.1.

Matthias Knäpper@knaeppDisclosure

The statement announces that IBM WebSphere Application Server is affected by CVE‑2026‑9319, a remote code execution vulnerability, without providing any exploits, patches or PoC.