CVE-2026-4096

Name of the Vulnerable Software and Affected Versions IBM DevOps Plan versions 3.0.0 through 3.0.6

Description An issue exists due to improper validation of input within the Host header of HTTP requests. This allows for HTTP header injection, which can be leveraged to perform cross-site scripting (injecting malicious scripts into web pages), cache poisoning (manipulating a web cache to serve incorrect content), or session hijacking (stealing session identifiers to impersonate users).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.