Skip to content
Multiple Vulnerabilities Discovered in IBM Java SDK and WebSphere Application Server

Multiple Vulnerabilities Discovered in IBM Java SDK and WebSphere Application Server

First seen 11 Sep 2026, 22:45 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •September 11, 2026 at 23:29 UTC
  • •Multiple vulnerabilities in IBM Java SDK and WebSphere Application Server disclosed.
  • •CVEs include CVE-2026-16441 and CVE-2026-57819, affecting unauthenticated network access.
  • •Users are urged to upgrade to patched versions to mitigate risks.

IBM has identified multiple vulnerabilities affecting the IBM Java SDK and WebSphere Application Server. The vulnerabilities include CVE-2026-16441, CVE-2026-46917, and CVE-2026-57819, among others, which could allow unauthenticated attackers to exploit systems via network access. The impact ranges from partial denial of service to unauthorized data access and modification. Users are advised to upgrade to the latest versions of affected products to mitigate risks. The vulnerabilities were disclosed in security bulletins published on September 11, 2026. The affected products include IBM i and WebSphere Application Server, with specific versions outlined for remediation. The CVSS scores for these vulnerabilities range from 5.3 to 9.6, indicating varying levels of severity. Current status indicates that patches are available, and users should apply them promptly.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-04-18
CVE-2026-41254 published
Integer overflow vulnerability in Little CMS affects Java SDK.
Ibm
2026-06-12
CVE-2026-50645 published
Vulnerability in Apache CXF allows denial of service attacks.
Ibm
2026-07-21
Multiple CVEs published
Several vulnerabilities including CVE-2026-46917 and CVE-2026-16441 disclosed affecting Java SDK.
Ibm
2026-07-21
CVE-2026-47010 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-07-21
CVE-2026-47027 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-07-21
CVE-2026-16243 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-07-21
CVE-2026-46917 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-07-21
CVE-2026-47021 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-07-21
CVE-2026-16439 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-07-21
CVE-2026-47058 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE

More articles in this cluster (9)

Following this threat?

Track CVE-2026-16243 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (39)

1 / 4