Skip to content
Threat Feed
Subscribe

Product

WebSphere Application Server Liberty

3 briefs RSS
medium threat

CVE-2026-8620: IBM WebSphere Application Server HTTP Request Smuggling Vulnerability

IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5 and 9.0 are vulnerable to HTTP request smuggling due to inconsistent interpretation of HTTP requests, potentially leading to unauthorized access and data manipulation.

WebSphere Application Server +3 http-request-smuggling websphere cve-2026-8620
2r 1t 1c
critical advisory

CVE-2026-8633: IBM WebSphere Application Server RCE via Crafted Request

IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty are vulnerable to remote code execution in the Web Server Plug-ins, through a specially crafted request (CVE-2026-8633).

WebSphere Application Server +3 rce websphere cve-2026-8633
2r 1t 1c
high advisory

IBM WebSphere Application Server Liberty Vulnerability Allows Code Execution

An authenticated remote attacker can exploit a vulnerability in IBM WebSphere Application Server Liberty to execute arbitrary program code on the target system.

WebSphere Application Server Liberty websphere rce code_execution vulnerability
2r 1t