Is CVE-2026-11537 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-11537?

CVE-2026-11537 has a CVSS v3 severity of MEDIUM (4.3).

Back

CVE-2026-11537

Description

IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to obtain sensitive information about the file system through the FileTransfer servlet.