Is CVE-2026-11712 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-11712?

CVE-2026-11712 has a CVSS v3 severity of CRITICAL (9.3).

Back

Description

IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulnerability in the administrative console help system.