IBM Support

PH71370:IBM WebSphere Application Server is affected by multiple vulnerabilities (CVE-2026-8646, CVE-2026-9320, CVE-2026-9071)

Download


Downloadable File

File linkFile sizeFile description
   
   
   
   
   

Abstract

IBM WebSphere Application Server is affected by multiple vulnerabilities (CVE-2026-8646, CVE-2026-9320, CVE-2026-9071)

Download Description

The fix for this APAR is targeted for inclusion in 8.5.5.30 and 9.0.5.29. For more information, see: Recommended Updates for WebSphere Application Server


This fix is superseded by later interim fixes.
The interim fix for this APAR has been superseded by a later interim fix. Download and install the interim fix for DT502943 to resolve this APAR.
If this APAR applied to older fix packs that the superseding APAR does not, the download link for those older fixes will be preserved below.

Problems Solved

PH71370

On

Technical Support

Contact IBM Support at https://www.ibm.com/mysupport/ or 1-800-IBM-SERV (US only).

Document Location

Worldwide

[{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSEQTP","label":"WebSphere Application Server"},"Component":"General","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF012","label":"IBM i"},{"code":"PF016","label":"Linux"},{"code":"PF033","label":"Windows"},{"code":"PF035","label":"z\/OS"}],"Version":"8.5.5.29;8.5.5.28;8.5.5.27;8.5.5.26;9.0.5.28;9.0.5.27;9.0.5.26;9.0.5.25","Edition":"Base","Line of Business":{"code":"LOB77","label":"Automation Platform"}}]

Document Information

Modified date:
13 October 2026

UID

ibm17276399