CVE-2026-11710IBM WebSphere Application Server is affected by an HTTP request smuggling vulnerability

Description

IBM WebSphere Application Server 8.5 is affected by an HTTP request smuggling vulnerability due to improper handling of Content-Length headers.

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

References and patches

• https://www.ibm.com/support/pages/node/7286731 vendor-advisorypatch