SEPTEMBER 14, 2026
Live Feed
Back to database
Case File

CVE-2026-9667

MEDIUM · CVSS 5.3 EPSS 0.31%

Source: NVD + CISA KEV + EPSS · Published 2026-09-10 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

IBM WebSphere Application Server versions 9.0 and 8.5 are susceptible to a server-side request forgery (SSRF) vulnerability, enabling remote, unauthenticated attackers to manipulate the server into sending outbound requests to arbitrary endpoints. This could lead to unauthorized access to internal resources or sensitive data. Organizations using these versions should prioritize patching to mitigate potential exploitation risks.

CVE
CVE-2026-9667
Severity
MEDIUM
CVSS
5.3
EPSS
0.31%

Original NVD Description

IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to server-side request forgery (SSRF) that could allow a remote, unauthenticated attacker to cause the server to send outbound requests to arbitrary endpoints.