CVE-2026-16189

IBM WebSphere Application Server versions 9.0 and 8.5 are vulnerable to a remote attacker injecting forged log entries into the server's administrative log. This could lead to misleading logs that may hinder incident response and forensic investigations. Organizations using these versions should prioritize patching to mitigate potential exploitation risks.