CVE-2026-16185

MEDIUM NVD

CVSS Score 6.4

Severity MEDIUM

Published Sep 14, 2026

Vendor unknown

Description

IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to bypass authentication on an admin console servlet.