https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-03T14:53:42.276248+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/certfr-2026-avi-1206 certfr-2026-avi-1206 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T14:53:42.404469+00:00 certfr-2026-avi-1206 https://vulnerability.circl.lu/vuln/fkie_cve-2026-15396 fkie_cve-2026-15396 2026-10-03T14:53:42.404568+00:00

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty are vulnerable to HTTP request smuggling, caused by improper parsing of the HTTP transfer-encoding request header. By sending a specially crafted HTTP transfer-encoding request header, an attacker could exploit this vulnerability to poison the web cache, bypass web application firewall protection, and conduct XSS attacks.

 https://vulnerability.circl.lu/vuln/ghsa-2fc8-vf8h-jfvw GHSA-2fc8-vf8h-jfvw 2026-10-03T14:53:42.404636+00:00

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty are vulnerable to HTTP request smuggling, caused by improper parsing of the HTTP transfer-encoding request header. By sending a specially crafted HTTP transfer-encoding request header, an attacker could exploit this vulnerability to poison the web cache, bypass web application firewall protection, and conduct XSS attacks.

 https://vulnerability.circl.lu/vuln/wid-sec-w-2026-3255 WID-SEC-W-2026-3255 — IBM WebSphere Application Server: Mehrere Schwachstellen 2026-10-03T14:53:42.404670+00:00

Ein Angreifer kann mehrere Schwachstellen in IBM WebSphere Application Server ausnutzen, um Sicherheitsmaßnahmen zu umgehen, Berechtigungen zu erweitern, vertrauliche Informationen offenzulegen, Daten zu manipulieren, Cross-Site-Scripting-Angriffe durchzuführen oder Denial-of-Service-Zustände herbeizuführen.