CVE-2026-16185

IBM WebSphere Application Server versions 9.0 and 8.5 are vulnerable to a remote authentication bypass on the admin console servlet, potentially allowing unauthorized access to sensitive administrative functions. This flaw poses a medium risk to organizations using these versions, particularly those with exposed admin interfaces. Administrators and security teams should prioritize patching or mitigating this vulnerability to safeguard their systems against potential exploitation.