EUVD-2026-83278

IBM WebSphere Application Server 9.0 and 8.5 is affected by an authentication bypass vulnerability in the SOAP/JMX connector...

CVE-2026-11538

IBM WebSphere Application Server versions prior to 9.0.5.29 and 8.5.5.31 are affected by a log injection vulnerability. The root cause is the improper output neutralization of crafted LTPA token cookies , which can be exploited to inject malicious entries into logs. This issue also impacts Jazz f...

CVE-2026-11538 IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

IBM WebSphere Application Server 9.0 and 8.5 is affected by a log injection vulnerability through crafted LTPA token cookies...

CVE-2026-11538 IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

IBM WebSphere Application Server 9.0 and 8.5 is affected by a log injection vulnerability through crafted LTPA token cookies...

EUVD-2026-83276

IBM WebSphere Application Server 9.0 and 8.5 is affected by a log injection vulnerability through crafted LTPA token cookies...

CVE-2026-11537

IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to obtain sensitive information about the file system through the FileTransfer servlet...

CVE-2026-10841

IBM WebSphere Application Server 8.5, 9.0, and Liberty are vulnerable to HTTP request smuggling...

EUVD-2026-83041

IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to obtain sensitive information about the file system through the FileTransfer servlet...

CVE-2026-11537

CVE-2026-11537 affects IBM WebSphere Application Server versions prior to 9.0.5.29 and 8.5.5.31 . A remote attacker with adjacent network access can obtain sensitive information about the file system through the FileTransfer servlet , requiring no privileges or user interaction. The CVSS 3.1 scor...

CVE-2026-11537 IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to obtain sensitive information about the file system through the FileTransfer servlet...

CVE-2026-11537 IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to obtain sensitive information about the file system through the FileTransfer servlet...

CVE-2026-10841

IBM WebSphere Application Server versions 8.5 (through 8.5.5.30), 9.0 (through 9.0.5.28), and Liberty (17.0.0.3 through 26.0.0.8) are vulnerable to HTTP request smuggling (CWE-444: Inconsistent Interpretation of HTTP Requests). The vulnerability allows an authenticated attacker with low privilege...

EUVD-2026-83030

IBM WebSphere Application Server 8.5, 9.0, and Liberty are vulnerable to HTTP request smuggling...

Security Bulletin: IBM WebSphere Application Server shipped with Jazz for Service Management (JazzSM) is affected by a privilege escalation

Summary IBM WebSphere Application Server shipped with Jazz for Service Management JazzSM is affected by a privilege escalation CVE-2026-11545 Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products| Versions...

Security Bulletin: IBM WebSphere Application Server shipped with Jazz for Service Management (JazzSM) are affected by multiple vulnerabilities

Summary IBM WebSphere Application Server shipped with Jazz for Service Management JazzSM are affected by multiple vulnerabilities CVE-2026-16190, CVE-2026-15887, CVE-2026-15412, CVE-2026-16435, CVE-2026-15396, CVE-2026-15634, CVE-2026-16185, CVE-2026-10841, CVE-2026-11548, CVE-2026-11549,...

CVE-2026-11545: Missing Authorization

IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to obtain sensitive information from the administrative console due to missing authorization checks...

CVE-2026-11549: Improper Access Control

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a virtual host bypass vulnerability...

CVE-2026-11710: Inconsistent Interpretation of HTTP Requests

IBM WebSphere Application Server 8.5 is affected by an HTTP request smuggling vulnerability due to improper handling of Content-Length headers...

CVE-2026-11548: Inconsistent Interpretation of HTTP Requests

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by an HTTP request smuggling vulnerability...

CVE-2026-11722: Inconsistent Interpretation of HTTP Requests

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by an HTTP request smuggling vulnerability...