CVE-2026-9327 is an improper privilege management vulnerability (CWE-269) affecting IBM WebSphere Application Server versions 8.5 and 9.0. It allows an authenticated user with a low-privilege administrative role to modify security configuration settings. This modification capability could result in denial of service conditions or information disclosure, although the CVSS vector indicates no confidentiality or integrity impact. The vulnerability requires network access with high attack complexity and no user interaction. No known exploits are reported in the wild.

An attacker with low-privilege administrative access can alter security configurations, potentially causing denial of service. There is no direct impact on confidentiality or integrity according to the CVSS vector. The vulnerability could disrupt service availability but does not allow unauthorized data access or modification beyond the allowed scope of the low-privilege role.

No vendor advisory or patch information is provided. Patch status is not yet confirmed — check the IBM advisory for current remediation guidance. Until a fix is available, restrict low-privilege administrative access and monitor for unauthorized configuration changes.