Product

WebSphere Application Server

3 briefs RSS

CVE-2026-9170: IBM WebSphere Application Server and Liberty Improper Input Validation Vulnerability

IBM WebSphere Application Server and WebSphere Liberty versions 8.5 and 9.0 are vulnerable to denial of service and potential remote code execution due to improper input validation as described in CVE-2026-9170.

WebSphere Application Server +2 vulnerability websphere rce dos

2r 2t 1c 2h ago

medium threat

CVE-2026-8620: IBM WebSphere Application Server HTTP Request Smuggling Vulnerability

2 rules 1 TTP 1 CVE

IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5 and 9.0 are vulnerable to HTTP request smuggling due to inconsistent interpretation of HTTP requests, potentially leading to unauthorized access and data manipulation.

WebSphere Application Server +3 http-request-smuggling websphere cve-2026-8620

2r 1t 1c 2h ago

critical advisory

CVE-2026-8633: IBM WebSphere Application Server RCE via Crafted Request

2 rules 1 TTP 1 CVE

IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty are vulnerable to remote code execution in the Web Server Plug-ins, through a specially crafted request (CVE-2026-8633).

WebSphere Application Server +3 rce websphere cve-2026-8633

2r 1t 1c 2h ago