CVE-2026-8620 — IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities whe…

CVE-2026-8620

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities when using when using Web Server Plug-ins PUBLISHED

Description (CNA)

IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to HTTP request smuggling in the Web Server Plug-ins through a specially crafted request.

Affected (CNA)

Vendor / product	Versions
IBM / Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty	affected 8.5, 9.0 through Interim Fix 002

CWE

CWE-444

References

https://www.ibm.com/support/pages/node/7274072

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.