Skip to content
COOEY

FAIL › dossier

websphere extreme scale

PRODUCT

· dossier confidence 40%

IBM WebSphere Extreme Scale is an enterprise in-memory data grid from IBM that has suffered critical RCE vulnerabilities in its core engine, including unsafe class loading and CORBA stub instantiation, requiring urgent patching and input validation reviews.

Failure events
2
Zero-days
0
RCEs
2
On KEV
0
Critical
0
Worst shame
40
PROFILE
Categoryenterprise_softwareWhat they doIBM WebSphere Extreme Scale is an in-memory data grid and distributed caching platform developed by IBM for high-performance computing and data-intensive applications.HQArmonk, New York Websitehttps://www.ibm.com/products/websphere-extreme-scale ↗
SECURITY POSTURE

The product has a documented history of remote code execution (RCE) vulnerabilities in its core data grid engine, specifically involving unsafe class loading and CORBA stub instantiation.

Notable failures
  • CVE-2026-13772: RCE via unsafe OQL class loading
  • CVE-2026-13773: RCE via unsafe CORBA stub instantiation
Patterns: unsafe dynamic class loading in core engine; lack of input validation on OQL queries
FAILURE HISTORY · 2
DATEEVENTSEVSUMMARY
2026-06-30 CVE-2026-13772 high IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 's Object Query Language engine resolves attacker-supplied class names via Class.forName() and invokes their constructors with no allow-list at three distinct sinks (SELECT NEW, enum literals, and reflection-based comparators);
2026-06-30 CVE-2026-13773 medium IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 Approximately 50 generated CORBA stub classes in WebSphere eXtreme Scale's ogclient.jar call ORB.string_to_object() on an attacker-controlled IOR string during Java deserialization, turning any unfiltered ObjectInputStream sink
DOSSIER SOURCES
Open questions: Exact founding date and headquarters location of the product or its parent company · Current size and ownership structure of IBM WebSphere Extreme Scale
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-08-23 03:55:05.591915+00:00