Skip to content
7.5 High

CVE-2026-8620 IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM WebSphere Application Server…

Description

IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to HTTP request smuggling in the Web Server Plug-ins through a specially crafted request.

Affected products and versions

Product Affected versions Fixed in
Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty Versions not published
The 3 CVEs of Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty →
Track this CVE