Medium severity6.5NVD Advisory· Published Sep 18, 2026· Updated Oct 22, 2026
CVE-2026-11549
CVE-2026-11549
Description
IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 are affected by a virtual host bypass vulnerability.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: 8.5, 9.0
- Range: 17.0.0.3 through 26.0.0.8
Patches
Vulnerability mechanics
References
2News mentions
1- IBM WebSphere: Eleven Vulnerabilities Disclosed Together, Including HTTP SmugglingVypr Intelligence · Sep 18, 2026