AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

IBMCVE-2026-11548

IBM CICS TX Advanced: request smuggling

IBM

CVE-2026-11548 · Published Sep 18, 2026 · updated Sep 22, 2026

Medium4.8
No fix yet
IBM advisory

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by an HTTP request smuggling vulnerability.

Affected versions

PackageAffectedFixed in
CICS TX Advanced
Product
<= 10.1No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-444

More IBM advisories

All IBM
High 8.1Sep 18IBM Guardium Data Protection: improper authorizationCVE-2026-84241no fix yetHigh 8.8Sep 18IBM Guardium Data Protection: cross-site request forgeryCVE-2026-84084no fix yetHigh 8.1Sep 18IBM Guardium Data Protection: command injectionCVE-2026-84085no fix yetHigh 7.2Sep 18IBM Guardium Data Protection: remote code executionCVE-2026-84086no fix yetHigh 7.8Sep 18IBM Guardium Data Protection: privilege escalationCVE-2026-84089no fix yetHigh 7.7Sep 18IBM Guardium Data Protection: information disclosureCVE-2026-84105no fix yet