Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
cybernieuws.nl Cybersecurity en informatiebeveiling nieuws alerts live · 13 min 107 bronnen 1 kritiek 10 vandaag
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2026-8646

HIGH · 7.4 CVSS Gepubliceerd: CWE-444

Beschrijving

IBM WebSphere Application Server 9.0 and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are vulnerable to HTTP request smuggling. A remote attacker could smuggle a specially crafted request to the application server thereby allowing the attacker to bypass security controls, spoof identity, escalate privilege, and expose sensitive information.

Vendors

Ibm Apple Linux Microsoft

Affected products

Websphere Application Server Macos Aix I Z/os Linux Kernel Windows

References