Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-105442

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a deserialization of untrusted data

Description

IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 Liberty could allow a remote attacker to cause a denial of service caused by an insecure deserialization in the messaging service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM WebSphere Application Server

  • 8.5affected
  • 9.0affected

IBM WebSphere Application Server - Liberty

  • 17.0.0.3 to ≤ 26.0.0.10affected

References