Detections
Analytics
CVE-2026-9072
high
Description
IBM WebSphere Application Server and IBM WebSphere Application Server Liberty, when using Intelligent Management with the WebSphere WebServer Plug-in component, are vulnerable to remote code execution and denial of service. This vulnerability can be exploited when an attacker impersonates backend servers and sends crafted responses to the plug-in. CWE: CWE-94: Improper Control of Generation of Code ('Code Injection')