CVE-2026-11537: Trusting HTTP Permission Methods on the Server Side

🗓️ 18 Sep 2026 00:00:00Reported by Rapid7Type

Remote attacker can obtain file system information in IBM WebSphere Application Server via FileTransfer.

Reporter	Title	Published	Views	Family All 8
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server shipped with Jazz for Service Management (JazzSM) are affected by multiple vulnerabilities	18 Sep 202607:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Tivoli Composite Application Manager for Application Diagnostics installed WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities	15 Sep 202607:51	–	ibm
CVE	CVE-2026-11537	18 Sep 202616:10	–	cve
Cvelist	CVE-2026-11537 IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities	18 Sep 202616:10	–	cvelist
EUVD	EUVD-2026-83041	18 Sep 202616:10	–	euvd
NVD	CVE-2026-11537	18 Sep 202616:17	–	nvd
Rapid7 Vulnerability Database (full)	IBM WebSphere Application Server: CVE-2026-11537: IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities	18 Sep 202600:00	–	rapid7
Vulnrichment	CVE-2026-11537 IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities	18 Sep 202616:10	–	vulnrichment