CVE-2026-2310

Received Received - Intake

XML External Entity Injection in IBM webMethods Integration Server

Publication date: 2026-09-10

Last updated on: 2026-09-10

Assigner: IBM Corporation

Description

IBM webMethods Integration Server 11.1 IBM webMethods Integration is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-10

Last Modified

2026-09-10

Generated

2026-09-11

AI Q&A

2026-09-11

EPSS Evaluated

N/A

NVD

CVE-2026-2310

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	webmethods_integration_server	11.1

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-91	The product does not properly neutralize special elements that are used in XML, allowing attackers to modify the syntax, content, or commands of the XML before it is processed by an end system.

Attack-Flow Graph

Executive Summary

IBM webMethods Integration Server 11.1 is vulnerable to XML external entity injection (XXE) when processing XML data. This allows a remote attacker to read sensitive files or cause a denial of service by consuming memory resources.

Impact Analysis

An attacker could exploit this to access confidential data stored on the server or disrupt services by consuming excessive memory, leading to system slowdowns or crashes.

Compliance Impact

This vulnerability could lead to unauthorized data exposure, violating GDPR (data protection) and HIPAA (health information privacy) by allowing access to sensitive personal or medical data.

Mitigation Strategies

Update IBM webMethods Integration Server to the latest patched version to address the XXE vulnerability. Disable XML external entity processing in your XML parser configuration if not required. Restrict network access to the server to trusted sources only.

Hi! I’m here to help you understand CVE-2026-2310. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70