Veille CVE

Vendredi 18 septembre 2026

11 CVE

Critique 0 Élevée 0 Moyenne 10 Faible 1 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Ibm websphere application server » ✕
  1. CVE-2026-11722 4.8 Moyenne

    IBM WebSphere Application Server · IBM WebSphere Application Server - Liberty

    IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 are affected by an HTTP request smuggling vulnerability.

  2. CVE-2026-11711 6.5 Moyenne

    IBM WebSphere Application Server

    IBM WebSphere Application Server 9.0 and 8.5 is affected by a deserialization vulnerability in the Name Service component.

  3. CVE-2026-11710 6.5 Moyenne

    IBM WebSphere Application Server

    IBM WebSphere Application Server 8.5 is affected by an HTTP request smuggling vulnerability due to improper handling of Content-Length headers.

  4. CVE-2026-11549 6.5 Moyenne

    IBM WebSphere Application Server · IBM WebSphere Application Server - Liberty

    IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 are affected by a virtual host bypass vulnerability.

  5. CVE-2026-11548 4.8 Moyenne

    IBM WebSphere Application Server · IBM WebSphere Application Server - Liberty

    IBM WebSphere Application Server 8.5 and 9.0, and and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 are affected by an HTTP request smuggling vulnerability.

  6. CVE-2026-11545 3.7 Faible

    IBM WebSphere Application Server

    IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to obtain sensitive information from the administrative console due to missing authorization checks.

  7. CVE-2026-11540 5.3 Moyenne

    IBM WebSphere Application Server

    IBM WebSphere Application Server 9.0 and 8.5 could allow a remote attacker to obtain sensitive information about the file system through the FileTransfer servlet.

  8. CVE-2026-11539 5.3 Moyenne

    IBM WebSphere Application Server

    IBM WebSphere Application Server 9.0 and 8.5 is affected by an authentication bypass vulnerability in the SOAP/JMX connector.

  9. CVE-2026-11538 5.3 Moyenne

    IBM WebSphere Application Server

    IBM WebSphere Application Server 9.0 and 8.5 is affected by a log injection vulnerability through crafted LTPA token cookies.

  10. CVE-2026-11537 4.3 Moyenne

    IBM WebSphere Application Server

    IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to obtain sensitive information about the file system through the FileTransfer servlet.

  11. CVE-2026-10841 4.8 Moyenne

    IBM WebSphere Application Server · IBM WebSphere Application Server - Liberty

    IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 are vulnerable to HTTP request smuggling.