CVE-2026-8646

CVE-2026-8646 affects IBM WebSphere Application Server 9.0, 8.5, and WebSphere Application Server Liberty 17.0.0.3–26.0.0.6. The vulnerability is HTTP request smuggling, allowing a remote attacker to bypass security controls, spoof identity, escalate privileges, and expose sensitive information. ...