Is CVE-2026-16184 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-16184?

CVE-2026-16184 has a CVSS v3 severity of HIGH (7).

Back

Description

IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to bypass authentication by sending a crafted unauthenticated request.