Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
IBM WebSphere Application Server 9.0 and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are vulnerable to HTTP request smuggling. A remote attacker could smuggle a specially crafted request to the application server thereby allowing the attacker to bypass security controls, spoof identity, escalate privilege, and expose sensitive information.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 7 products
| Date | Total | Labels |
|---|
| 2026-06-22 | 1 | Disclosure1 |
| 2026-07-16 | 1 | General1 |
⚠️ Vulnerabilidades en productos IBM ❗ CVE-2026-9071 ❗ CVE-2026-8646 ❗ CVE-2026-10845 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-ibm-6/ https://t.co/rFqY4t5W1g
Post summary
The post lists several IBM product CVEs without providing detailed technical information or any evidence of exploitation, offering only a link for further details.
CVE-2026-8646 HTTP Request Smuggling in IBM WebSphere Application Server 9.0 and 8.5 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-8646
Post summary
CVE-2026-8646 is an HTTP request smuggling vulnerability affecting IBM WebSphere Application Server 9.0 and 8.5; the text provides only basic disclosure information with no exploitation, patch, or PoC details.
8 of 8 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | apple | macos | - | - | - |
| OS | ibm | aix | - | - | - |
| OS | ibm | i | - | - | - |
| App | ibm | websphere_application_server | - | - | - |
| App | ibm | websphere_application_server | - | - | - |
| OS | ibm | z\/os | - | - | - |
| OS | linux | linux_kernel | - | - | - |
| OS | microsoft | windows | - | - | - |