Lucene search
K

CVE-2026-9072 IBM i is Affected By Denial of Service, HTTP Request Smuggling, and Remote Code Execution Vulnerabilities in IBM WebSphere Application Server Liberty [, , , , ]

🗓️ 22 Jun 2026 14:21:35Reported by ibmType 
cvelist
 cvelist
🔗 www.cve.org👁 2 Views

CVE-2026-9072: IBM i and WebSphere Liberty vulnerable to remote code execution, denial of service, and HTTP request smuggling via impersonated backends.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins
Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities when using the Web Server Plug-ins (CVE-2026-9072, CVE-2026-8858, CVE-2026-10852)
16 Jun 202612:50
ibm
IBM Security Bulletins
Security Bulletin: Multiple Security vulnerabilities have been identified in IBM WebSphere Application Server traditional, WebSphere Liberty profile, IBM HTTP Server its WebSphere plugins shipped with IBM Business Automation Workflow
18 Jun 202620:12
ibm
IBM Security Bulletins
Security Bulletin: IBM i is Affected By Denial of Service, HTTP Request Smuggling, and Remote Code Execution Vulnerabilities in IBM WebSphere Application Server Liberty [CVE-2026-10852, CVE-2026-8858, CVE-2026-9072, CVE-2026-8633, CVE-2026-8620]
22 Jun 202613:42
ibm
IBM Security Bulletins
Security Bulletin: IBM WebSphere Application Server shipped with Jazz for Service Management (JazzSM) is affected by multiple vulnerabilities when using the Web Server Plug-ins
18 Jun 202607:17
ibm
IBM Security Bulletins
Security Bulletin: Vulnerabilities have been identified in WebSphere Application Server Web Server Plug-ins shipped with WebSphere Service Registry and Repository (CVE-2026-10852, CVE-2026-8858 and CVE-2026-9072)
17 Jun 202617:54
ibm
ATTACKERKB
CVE-2026-9072
22 Jun 202614:21
attackerkb
Circl
CVE-2026-9072
16 Jun 202612:50
circl
CVE
CVE-2026-9072
22 Jun 202614:21
cve
EUVD
EUVD-2026-38286
22 Jun 202618:34
euvd
NVD
CVE-2026-9072
22 Jun 202616:16
nvd
Rows per page
[
  {
    "vendor": "IBM",
    "product": "i",
    "versions": [
      {
        "status": "affected",
        "version": "7.6.0",
        "lessThanOrEqual": "1.8.4",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "7.5.0",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "7.4.0",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "7.3.0",
        "versionType": "semver"
      }
    ],
    "cpes": [
      "cpe:2.3:a:ibm:i:7.6:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:i:7.6.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:i:7.5:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:i:7.5.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:i:7.4:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:i:7.4.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:i:7.3:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:i:7.3.0:*:*:*:*:*:*:*"
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation