Vulnerability Details CVE-2026-8400
IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty Continuous delivery has a flaw in the ORB component in IBM SDK, Java Technology Edition, may allow a malicious IIOP server to induce loading and instantation of arbitrary classes.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 35.9%
CVSS Severity
CVSS v3 Score 8.1
Products affected by CVE-2026-8400
-
cpe:2.3:a:ibm:websphere_application_server:-
-
cpe:2.3:a:ibm:websphere_application_server:8.5.0.0
-
cpe:2.3:a:ibm:websphere_application_server:9.0.0.0