NetSight
high7.5

CVE-2026-8620

IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM WebSphere Application Server and WebSphere Application Server Liber…

Impact

IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to HTTP request smuggling in the Web Server Plug-ins through a specially crafted request.

Affected products

VendorProductAffected versions
IbmWebsphere Application Server
from 8.5.0.0 before 8.5.5.30
from 9.0.0.0 before 9.0.5.28

Weakness classification

References