4.8
Medium
CVE-2026-11548 IBM WebSphere Application Server 8.5 and 9.0, and and IBM WebSphere Application Server - Liberty 17.0.0.3 through…
Description
IBM WebSphere Application Server 8.5 and 9.0, and and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 are affected by an HTTP request smuggling vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| CICS TX Advanced | 10.1 | No fix stated |
| WebSphere Application Server | 9.0 | No fix stated |
| WebSphere Application Server | 8.5 | No fix stated |
| WebSphere Application Server - Liberty 17.0 | 17.0.0.3 → 26.0.0.5 | No fix stated |
Other CVEs of CICS TX Advanced
The 37 CVEs of CICS TX Advanced →
CVE-2026-11722
IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8…
4.8
Medium
CVE-2026-11549
IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through…
6.5
Medium
CVE-2026-10841
IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through…
4.8
Medium
CVE-2025-1331
IBM CICS TX Standard 11.1 and IBM CICS TX Advanced 10.1 and 11.1 could allow a local user to execute arbitrary code on…
7.8
High