IBM WebSphere Application Server 8.5, 9.0, and Liberty are vulnerable to HTTP request smuggling.

Medium CVSS 4.2

CVECVE-2026-10841

First seen2026-09-18 16:32 UTC

Disclosed2026-09-18 16:17 UTC

Last updated2026-09-18 16:32 UTC

Channel statusauto

Summary

IBM WebSphere Application Server 8.5, 9.0, and Liberty are vulnerable to HTTP request smuggling.

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).