HTTP Request Smuggling Vulnerability in IBM WebSphere Application Server
CVE-2026-11710

6.5MEDIUM

Key Information:

Vendor

IBM
Status
Websphere Application Server
Vendor
CVE Published:
18 September 2026

What is CVE-2026-11710?

IBM WebSphere Application Server 8.5 is susceptible to an HTTP request smuggling vulnerability that arises from improper parsing of Content-Length headers. This flaw could allow an attacker to send crafted requests that deceive the server's handling of HTTP requests, potentially allowing unauthorized actions or responses. Organizations utilizing this software should review the vendor's advisory for remediation steps to mitigate associated security risks.

Affected Version(s)

WebSphere Application Server 8.5

References

https://www.ibm.com/support/pages/node/7286731
vendor-advisorypatch

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.