PT-2026-43363 · Ibm · Web Server Plug-Ins For Websphere Application Server/Websphere Liberty+1

Publicado 2026-05-26 · Atualizado 2026-05-26 · CVE-2026-8620

NVD

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:N

IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to HTTP request smuggling in the Web Server Plug-ins through a specially crafted request.

Correção

HTTP Request/Response Smuggling

Enumeração de Fraquezas

CWE-444

Identificadores relacionados

CVE-2026-8620

Produtos afetados

Web Server Plug-Ins For Websphere Application Server/Websphere Liberty

Ibm Websphere Application Server

Referências · 4

• https://twitter.com/knaepp/status/2059379056194228610 · Publicação no Twitter
• https://twitter.com/knaepp/status/2059297265701863578 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-8620 · Nota de Segurança
• https://ibm.com/support/pages/node/7274072 · Correção, Aviso do Fabricante