CVE-2026-10842

IBM WebSphere Application Server versions 8.5, 9.0, and Liberty versions 17.0.0.3 through 26.0.0.7 are vulnerable to a security constraint bypass, potentially allowing remote attackers to exploit this weakness. This vulnerability could lead to unauthorized access to sensitive data or system functionalities, posing a significant risk to organizations using these versions. Administrators of affected WebSphere environments should prioritize applying the necessary patches to mitigate this high-severity risk.