Product

IBM Web Server Plug-Ins for WebSphere Application Server and WebSphere Liberty 9.0

2 briefs RSS

CVE-2026-8620: IBM WebSphere Application Server HTTP Request Smuggling Vulnerability

IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5 and 9.0 are vulnerable to HTTP request smuggling due to inconsistent interpretation of HTTP requests, potentially leading to unauthorized access and data manipulation.

WebSphere Application Server +3 http-request-smuggling websphere cve-2026-8620

2r 1t 1c 2h ago

critical advisory

CVE-2026-8633: IBM WebSphere Application Server RCE via Crafted Request

2 rules 1 TTP 1 CVE

IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty are vulnerable to remote code execution in the Web Server Plug-ins, through a specially crafted request (CVE-2026-8633).

WebSphere Application Server +3 rce websphere cve-2026-8633

2r 1t 1c 2h ago