Is CVE-2026-14446 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-14446?

CVE-2026-14446 has a CVSS v3 severity of CRITICAL (9.8).

Back

Description

IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to broken access control/privilege escalation in the administrative console.