CVE-2026-11710

IBM WebSphere Application Server 8.5 (versions 8.5.5.0 through 8.5.5.30) is vulnerable to HTTP request smuggling caused by improper handling of Content-Length headers (CWE-444). The flaw allows an attacker to send crafted requests that are interpreted differently by the server versus downstream c...

EUVD-2026-83287

IBM WebSphere Application Server 8.5 is affected by an HTTP request smuggling vulnerability due to improper handling of Content-Length headers...

CVE-2026-11710 IBM WebSphere Application Server is affected by an HTTP request smuggling vulnerability

IBM WebSphere Application Server 8.5 is affected by an HTTP request smuggling vulnerability due to improper handling of Content-Length headers...

CVE-2026-11549

CVE-2026-11549 is a virtual host bypass vulnerability (CWE-284: Improper Access Control) in IBM WebSphere Application Server and WebSphere Application Server Liberty . A remote, unauthenticated attacker over the network can exploit it with low complexity, resulting in low confidentiality and inte...

CVE-2026-11549 Multiple security vulnerabilities may affect IBM WebSphere Liberty that is shipped with IBM CICS TX Advanced.

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a virtual host bypass vulnerability...

CVE-2026-11549 Multiple security vulnerabilities may affect IBM WebSphere Liberty that is shipped with IBM CICS TX Advanced.

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a virtual host bypass vulnerability...

EUVD-2026-83286

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a virtual host bypass vulnerability...

CVE-2026-11548

CVE-2026-11548 is an HTTP request smuggling vulnerability (CWE-444) affecting IBM WebSphere Application Server (versions 8.5 and 9.0) and WebSphere Application Server Liberty (versions 17.0.0.3 through 26.0.0.8). The CVSS 3.1 score is 4.8 (Medium) , with a network attack vector, high complexity, ...

EUVD-2026-83281

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by an HTTP request smuggling vulnerability...

CVE-2026-11548 Multiple security vulnerabilities may affect IBM WebSphere Liberty that is shipped with IBM CICS TX Advanced.

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by an HTTP request smuggling vulnerability...

CVE-2026-11548 Multiple security vulnerabilities may affect IBM WebSphere Liberty that is shipped with IBM CICS TX Advanced.

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by an HTTP request smuggling vulnerability...

EUVD-2026-83280

IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to obtain sensitive information from the administrative console due to missing authorization checks...

CVE-2026-11545 IBM WebSphere Application Server is affected by a privilege escalation

IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to obtain sensitive information from the administrative console due to missing authorization checks...

CVE-2026-11545 IBM WebSphere Application Server is affected by a privilege escalation

IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to obtain sensitive information from the administrative console due to missing authorization checks...

CVE-2026-11545

IBM WebSphere Application Server versions 8.5.5.0–8.5.5.29 and 9.0.0.0–9.0.5.28 are affected by a privilege escalation due to missing authorization checks in the administrative console, allowing a remote unauthenticated attacker to obtain sensitive information. CVSS 3.1 score is 3.7 (Low) with hi...

EUVD-2026-83279

IBM WebSphere Application Server 9.0 and 8.5 could allow a remote attacker to obtain sensitive information about the file system through the FileTransfer servlet...

CVE-2026-11540

IBM WebSphere Application Server versions 9.0 and 8.5 (prior to 9.0.5.29 and 8.5.5.31 ) contain an information disclosure vulnerability in the FileTransfer servlet , allowing a remote attacker with no privileges or user interaction to obtain sensitive information about the file system. The CVSS 3...

CVE-2026-11540 IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

IBM WebSphere Application Server 9.0 and 8.5 could allow a remote attacker to obtain sensitive information about the file system through the FileTransfer servlet...

CVE-2026-11540 IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

IBM WebSphere Application Server 9.0 and 8.5 could allow a remote attacker to obtain sensitive information about the file system through the FileTransfer servlet...

CVE-2026-11539 IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

IBM WebSphere Application Server 9.0 and 8.5 is affected by an authentication bypass vulnerability in the SOAP/JMX connector...