CVE-2026-11537 IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to obtain sensitive information about the file system through the FileTransfer servlet...

CVE-2026-10841

IBM WebSphere Application Server versions 8.5 (through 8.5.5.30), 9.0 (through 9.0.5.28), and Liberty (17.0.0.3 through 26.0.0.8) are vulnerable to HTTP request smuggling (CWE-444: Inconsistent Interpretation of HTTP Requests). The vulnerability allows an authenticated attacker with low privilege...

EUVD-2026-83030

IBM WebSphere Application Server 8.5, 9.0, and Liberty are vulnerable to HTTP request smuggling...

Security Bulletin: IBM WebSphere Application Server shipped with Jazz for Service Management (JazzSM) is affected by a privilege escalation

Summary IBM WebSphere Application Server shipped with Jazz for Service Management JazzSM is affected by a privilege escalation CVE-2026-11545 Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products| Versions...

Security Bulletin: IBM WebSphere Application Server shipped with Jazz for Service Management (JazzSM) are affected by multiple vulnerabilities

Summary IBM WebSphere Application Server shipped with Jazz for Service Management JazzSM are affected by multiple vulnerabilities CVE-2026-16190, CVE-2026-15887, CVE-2026-15412, CVE-2026-16435, CVE-2026-15396, CVE-2026-15634, CVE-2026-16185, CVE-2026-10841, CVE-2026-11548, CVE-2026-11549,...

PT-2026-95608

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server affected versions not specified IBM WebSphere Application Server Liberty affected versions not specified Description IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a...

CVE-2026-11537: Trusting HTTP Permission Methods on the Server Side

IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to obtain sensitive information about the file system through the FileTransfer servlet...

CVE-2026-11540: Incorrect Authorization

IBM WebSphere Application Server 9.0 and 8.5 could allow a remote attacker to obtain sensitive information about the file system through the FileTransfer servlet...

CVE-2026-11710: Inconsistent Interpretation of HTTP Requests

IBM WebSphere Application Server 8.5 is affected by an HTTP request smuggling vulnerability due to improper handling of Content-Length headers...

CVE-2026-11711: Deserialization of Untrusted Data

IBM WebSphere Application Server 9.0 and 8.5 is affected by a deserialization vulnerability in the Name Service component...

PT-2026-95612

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server affected versions not specified IBM WebSphere Application Server Liberty affected versions not specified Description IBM WebSphere Application Server and WebSphere Application Server Liberty are subject to HTTP...

CVE-2026-11545: Missing Authorization

IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to obtain sensitive information from the administrative console due to missing authorization checks...

CVE-2026-10841: Inconsistent Interpretation of HTTP Requests

IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 are vulnerable to HTTP request smuggling...

PT-2026-95466

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server version 8.5 IBM WebSphere Application Server version 9.0 IBM WebSphere Liberty affected versions not specified Description IBM WebSphere Application Server and Liberty are susceptible to HTTP request smuggling,...

PT-2026-95606

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 8.5 and 9.0 Description Missing authorization checks in the administrative console may allow a remote attacker to obtain sensitive information. Recommendations At the moment, there is no information...

PT-2026-95604

IBM WebSphere Application Server 9.0 and 8.5 is affected by an authentication bypass vulnerability in the SOAP/JMX connector...

PT-2026-95605

IBM WebSphere Application Server 9.0 and 8.5 could allow a remote attacker to obtain sensitive information about the file system through the FileTransfer servlet...

PT-2026-95610

IBM WebSphere Application Server 9.0 and 8.5 is affected by a deserialization vulnerability in the Name Service component...

PT-2026-95609

IBM WebSphere Application Server 8.5 is affected by an HTTP request smuggling vulnerability due to improper handling of Content-Length headers...

CVE-2026-11539: Missing Authentication for Critical Function

IBM WebSphere Application Server 9.0 and 8.5 is affected by an authentication bypass vulnerability in the SOAP/JMX connector...