CVE-2026-8646 | IBM WebSphere Application Server up to 8.5/9.0/17.0.0.3/26.0.0.6 request smuggling

June 22, 2026 Yanac

A vulnerability was found in IBM WebSphere Application Server up to 8.5/9.0/17.0.0.3/26.0.0.6 and classified as problematic. Affected is an unknown function. Executing a manipulation can lead to http request smuggling.

This vulnerability is tracked as CVE-2026-8646. The attack can be launched remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More