CVE-2026-8400

HIGH

Multiple Vulnerabilities in IBM® Java SDK affect IBM WebSphere Application Server and WebSphere Application Server Liberty due to the July 2026 CPU

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2026-8400 has a selected CVSS score of 8.1 (high).

Description

IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty Continuous delivery has a flaw in the ORB component in IBM SDK, Java Technology Edition, may allow a malicious IIOP server to induce loading and instantation of arbitrary classes.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Aug 5, 2026 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

WebSphere Application Server

Browse IBM / WebSphere Application Server
CVE List8.5affected
9.0affected

WebSphere Application Server - Liberty

Browse IBM / WebSphere Application Server - Liberty
CVE ListContinuous deliveryaffected

References

2