PT-2026-43363 · Ibm · Web Server Plug-Ins For Websphere Application Server/Websphere Liberty+1

Published 2026-05-26 · Updated 2026-05-26 · CVE-2026-8620

NVD

CVSS v3.1

7.5

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:N

IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to HTTP request smuggling in the Web Server Plug-ins through a specially crafted request.

Fix

HTTP Request/Response Smuggling

Weakness Enumeration

CWE-444

Related Identifiers

CVE-2026-8620

Affected Products

Web Server Plug-Ins For Websphere Application Server/Websphere Liberty

Ibm Websphere Application Server

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-8620 · Security Note
• https://twitter.com/knaepp/status/2059379056194228610 · Twitter Post
• https://twitter.com/knaepp/status/2059297265701863578 · Twitter Post
• https://ibm.com/support/pages/node/7274072 · Patch, Vendor Advisory