Tag

Http-Request-Smuggling

2 briefs RSS

CVE-2026-8620: IBM WebSphere Application Server HTTP Request Smuggling Vulnerability

IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5 and 9.0 are vulnerable to HTTP request smuggling due to inconsistent interpretation of HTTP requests, potentially leading to unauthorized access and data manipulation.

WebSphere Application Server +3 http-request-smuggling websphere cve-2026-8620

2r 1t 1c May 26, 2026

critical threat

CVE-2026-1502 HTTP Client Proxy Tunnel Headers CR/LF Injection Vulnerability

2 rules 1 TTP 1 CVE

CVE-2026-1502 is a critical vulnerability in Microsoft HTTP client proxy tunnel header validation, potentially allowing for CR/LF injection attacks.

crlf-injection http-request-smuggling proxy-vulnerability cve

2r 1t 1c May 26, 2026