CVE-2026-2310CWE-91

CVE-2026-2310

High · published September 11, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
8.5
In the wild
Unconfirmed
What it is

IBM webMethods Integration Server 11.1 IBM webMethods Integration is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00193 · 8.5th percentile
Weakness
CWE-91 · XML Injection (aka Blind XPath Injection)
Published
2026-09-11T02:16Z
References (1)
https://www.ibm.com/support/pages/node/7286620 · [email protected]
EPSS history
Timeline
  • 12 SEP 03:20Z
    EPSS moved — → 0%
    epss
  • 10 SEP 22:03Z
    IBM webMethods Integration Server is vulnerable to an XML external entity injection (XXE) attack when processing XML data
    cvelistv5