CVE-2026-11538

LOW NVD

CVSS Score 3.7

Severity LOW

Published Sep 18, 2026

Vendor unknown

Description

IBM WebSphere Application Server 9.0 and 8.5 is affected by a log injection vulnerability through crafted LTPA token cookies.