IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to potential remote code execution due to deserialization of untrusted data via JAX-WS endpoints with WS-Security.
IBM WebSphere Application Server
Exploit
CVE-2026-9319
NVD
Refer to CVE-2026-9319 NVD advisory