CVE-2026-10842

HighCVSS 7.5/10Last modified Aug 5, 2026

Description

IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 Traditional and Liberty could allow a remote attacker to bypass security constraints.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-289

Affected software

VendorProductVersions
IBMWebSphere Application Server8.5; 9.0
IBMWebSphere Application Server - Liberty>= 17.0.0.3, <= 26.0.0.7

References

Timeline

Published
Jul 30, 2026
Last modified
Aug 5, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-1084217.5Out-of-bounds read in Windows File Server Resource Management Service allows an unauthorized attacker to elevate privileges over a network.CVE-2026-1084234.7Out-of-bounds read in Windows WinHTTP allows an authorized attacker to disclose information locally.CVE-2026-1084246.5Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.CVE-2026-1084255.9Out-of-bounds read in Windows DNS allows an unauthorized attacker to disclose information over a network.CVE-2026-1084268.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-1084278.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-1084288.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-1084298.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108437.2A flaw was found in the OpenShift Cloud Credential Operator Mint-mode IAM policies for AWS. Operator credentials are provisioned with accounCVE-2026-1084308.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-1084318.8Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-1084328.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-10842: High severity, CVSS 7.5 | Vulnix