7.5
High
CVE-2026-8620 IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM WebSphere Application Server…
Description
IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to HTTP request smuggling in the Web Server Plug-ins through a specially crafted request.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty | Versions not published |