CVE-2026-101117

Summary

IBM WebSphere Extreme Scale versions 8.6.1.0 through 8.6.2.2 have an improperly configured Content Security Policy (CSP), allowing a remote attacker to bypass security restrictions without authentication. This misconfiguration could enable attackers to inject malicious content or execute unauthorized actions in the context of affected web interfaces.

Exploitability

Exploitation requires no prior access or user interaction and is straightforward for a remote attacker due to the lack of CSP enforcement.

Blast radius

Successful exploitation could lead to unauthorized data access or manipulation via injected scripts or bypassed security controls, potentially compromising confidentiality and integrity of the WebSphere Extreme Scale environment.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to IBM WebSphere Extreme Scale 8.6.2.3 or later, where the improper Content Security Policy configuration has been corrected.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.