VulnSocial

CVE-2026-11541Disclousure(ibm / websphere_application_server)

LOWCVSS 9.8 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

IBM CICS Transaction Gateway for Multiplatforms 9.1, 9.2, 9.3, and 10.1 IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are affected by an HTTP request smuggling vulnerability.

ibm CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-444

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • websphere_application_server

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclousure: 1 classified signal
  • General: 1 classified signal
  • 2 total mentions across 1 day

Affected systems

Vendors
ibm
Products
websphere_application_server

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-06-30: 2Technical Details · 2026-06-30: 206-30
Signal classification2 categories
Disclousure
150.0%
General
150.0%
Referenced assets2 URLs
By indicator
Full discourse2 posts
  • CVE@CVEnew
    General

    CVE-2026-11541 IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are affected by an HTTP request smuggling vulne… https://www.cve.org/CVERecord?id=CVE-2026-11541

    Post summary

    The note informs that IBM WebSphere Application Server (9.0, 8.5) and Liberty (17.0.0.3‑26.0.0.6) are vulnerable to HTTP request smuggling under CVE-2026-11541, with no further details or solutions provided.

    00010678
    57.7K followersView on X
  • Infoflowcloud@infoflowcloud
    Disclousure

    🚨*CVE* CVE-2026-11541 IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are affected by an HTTP request smuggling vulne… https://www.cve.org/CVERecord?id=CVE-2026-11541 ----- Traducción: CVE-2026-11541 IBM… http://infoflow.cloud`

    Post summary

    The tweet announces CVE-2026-11541, highlighting an HTTP request smuggling flaw in several IBM WebSphere Application Server versions and linking to the CVE record, but it offers no PoC, exploit code, or patch information.

    0000039
    89 followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
Appibmwebsphere_application_server---
Appibmwebsphere_application_server---

Explore more

Back to dashboardibm CVEswebsphere_application_server vulnerabilities