Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty vulnerabilities

2 known vulnerabilities in Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty from IBM. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Web Server Plug-ins for WebSphere Application…: Improper Control of Generation of Code

  CVE-2026-8633May 26, 2026IBM

  IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to remote code execution in the Web Server Plug-ins, through a specially crafted re

• 7.5 High severity

  Web Server Plug-ins for WebSphere Application…: Inconsistent Interpretation of HTTP Requests

  CVE-2026-8620May 26, 2026IBM

  IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to HTTP request smuggling in the Web Server Plug-ins through a specially crafted re