CVE-2026-9170

Name of the Vulnerable Software and Affected Versions IBM HTTP Server versions 8.5 and 9.0 IBM WebSphere Application Server versions 8.5 and 9.0 IBM WebSphere Application Server Liberty versions 8.5 and 9.0

Description IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty are affected by improper input validation and incorrect code generation management. This issue can lead to HTTP Request Smuggling, a technique where the frontend and backend servers interpret the boundaries of an HTTP request differently. Exploitation of this flaw may allow a remote attacker to execute arbitrary code or cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.