CVE-2026-8620

HIGH 7.5CVE-2026-8620 · Published 26/05/2026 · updated 23/07/2026

In short

CVE-2026-8620 is a HIGH (CVSS 7.5) vulnerability affecting websphere application server (ibm).
Chance of exploitation in the next 30 days (EPSS): 0.28%, higher than 20.4% of all vulnerabilities.
Fix: update to 8.5.5.30, 9.0.5.28 or later.

Package	Affected versions	Patched versions
websphere application server ibm	`≥ 8.5.0.0, < 8.5.5.30≥ 9.0.0.0, < 9.0.5.28`	`8.5.5.309.0.5.28`

Description

IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to HTTP request smuggling in the Web Server Plug-ins through a specially crafted request.

References

ibm.com/support/pages/node/7274072 · Patch

More vulnerabilities in websphere application server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

websphere application server

ibm

≥ 8.5.0.0, < 8.5.5.30≥ 9.0.0.0, < 9.0.5.28

8.5.5.309.0.5.28

More vulnerabilities in websphere application server

See all →