CVE-2026-11538

IBM WebSphere Application Server 9.0 and 8.5 is affected by a log injection vulnerability through crafted LTPA token cookies...

EUVD-2026-83290

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by an HTTP request smuggling vulnerability...

EUVD-2026-83288

IBM WebSphere Application Server 9.0 and 8.5 is affected by a deserialization vulnerability in the Name Service component...

CVE-2026-11711

IBM WebSphere Application Server versions 9.0 and 8.5 are affected by a deserialization vulnerability in the Name Service component , rated CVSS 6.5 (Medium) with an attack vector of adjacent network, no required privileges, and high availability impact. The vulnerability is fixed in 9.0.5.29 and...

EUVD-2026-83287

IBM WebSphere Application Server 8.5 is affected by an HTTP request smuggling vulnerability due to improper handling of Content-Length headers...

CVE-2026-11710

IBM WebSphere Application Server 8.5 (versions 8.5.5.0 through 8.5.5.30) is vulnerable to HTTP request smuggling caused by improper handling of Content-Length headers (CWE-444). The flaw allows an attacker to send crafted requests that are interpreted differently by the server versus downstream c...

EUVD-2026-83286

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a virtual host bypass vulnerability...

EUVD-2026-83281

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by an HTTP request smuggling vulnerability...

CVE-2026-11545

IBM WebSphere Application Server versions 8.5.5.0–8.5.5.29 and 9.0.0.0–9.0.5.28 are affected by a privilege escalation due to missing authorization checks in the administrative console, allowing a remote unauthenticated attacker to obtain sensitive information. CVSS 3.1 score is 3.7 (Low) with hi...

EUVD-2026-83279

IBM WebSphere Application Server 9.0 and 8.5 could allow a remote attacker to obtain sensitive information about the file system through the FileTransfer servlet...

CVE-2026-11540

IBM WebSphere Application Server versions 9.0 and 8.5 (prior to 9.0.5.29 and 8.5.5.31 ) contain an information disclosure vulnerability in the FileTransfer servlet , allowing a remote attacker with no privileges or user interaction to obtain sensitive information about the file system. The CVSS 3...

CVE-2026-11539

IBM WebSphere Application Server 9.0 (prior to 9.0.5.29) and 8.5 (prior to 8.5.5.31) is affected by an authentication bypass in the SOAP/JMX connector , rated CVSS 5.3 MEDIUM (network vector, no privileges required, low confidentiality impact). The vulnerability allows unauthenticated network-bas...

EUVD-2026-83278

IBM WebSphere Application Server 9.0 and 8.5 is affected by an authentication bypass vulnerability in the SOAP/JMX connector...

CVE-2026-11538

CVE-2026-11538 is a log injection vulnerability in IBM WebSphere Application Server 9.0 and 8.5 , triggered through crafted LTPA token cookies . The vulnerability carries a CVSS 3.1 base score of 3.7 (LOW) with high attack complexity, no privileges required, and a low integrity impact —meaning an...

EUVD-2026-83276

IBM WebSphere Application Server 9.0 and 8.5 is affected by a log injection vulnerability through crafted LTPA token cookies...

CVE-2026-11537

IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to obtain sensitive information about the file system through the FileTransfer servlet...

CVE-2026-10841

IBM WebSphere Application Server 8.5, 9.0, and Liberty are vulnerable to HTTP request smuggling...

EUVD-2026-83041

IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to obtain sensitive information about the file system through the FileTransfer servlet...

CVE-2026-11537

CVE-2026-11537 affects IBM WebSphere Application Server versions prior to 9.0.5.29 and 8.5.5.31 . A remote attacker with adjacent network access can obtain sensitive information about the file system through the FileTransfer servlet , requiring no privileges or user interaction. The CVSS 3.1 scor...

CVE-2026-10841

IBM WebSphere Application Server versions 8.5 (through 8.5.5.30), 9.0 (through 9.0.5.28), and Liberty (17.0.0.3 through 26.0.0.8) are vulnerable to HTTP request smuggling (CWE-444: Inconsistent Interpretation of HTTP Requests). The vulnerability allows an authenticated attacker with low privilege...