CVE-2026-16186

IBM WebSphere Application Server versions 9.0 and 8.5 are vulnerable to a reflected cross-site scripting (XSS) flaw, which could allow an attacker to inject malicious scripts into web pages viewed by users. This vulnerability poses a risk of unauthorized actions being executed in the context of the affected user's session. Organizations using these versions of WebSphere should prioritize remediation to protect against potential exploitation and safeguard user data.