IBM WebSphere Application Server Hit by Critical XSS and Path Traversal Vulnerabilities

Gbhackers •Divya • July 6, 2026

IBM has disclosed several security vulnerabilities in its WebSphere Application Server that put enterprise environments at risk of cross-site scripting (XSS) and path-traversal attacks. These vulnerabilities could allow attackers to compromise administrative sessions and access sensitive data. The issues, identified as CVE-2026-11712, CVE-2026-11595, and CVE-2026-11708, affect widely deployed versions 8.5 and 9.0 of the application […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical XSS and Path Traversal Vulnerabilities in IBM WebSphere Application Server IBM has disclosed critical vulnerabilities in its WebSphere Application Server, specifically CVE-2026-11712, CVE-2026-11595, and CVE-2026-11708, which affect widely used versions 8.5 and 9.0. These vulnerabilities enable cross-site scripting (XSS) and path traversal attacks, potentially allowing attackers to compromise administrative sessions and access sensitive data. The issues were published on June 30, 2026, and pose significant risks to enterprises relying on this platform for critical operations. Organizations are urged to assess their systems for these vulnerabilities and apply necessary mitigations. The vulnerabilities have been confirmed by IBM and are a serious concern for affected users. 2 sources 71

Extracted Entities

IBM WebSphere Application Server Hit by Critical XSS and Path Traversal Vulnerabilities

The full story

Extracted Entities

CVEs (3)

CWE Weaknesses (2)

Platforms (1)

Vulnerabilities (2)