EUVD-2026-83281
GHSA-73xv-wjr6-7jg4
Severity by source
AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Remote unauthenticated (AV:N/PR:N) but request smuggling needs a specific proxy/back-end parsing desync (AC:H); impact limited to request hijack/response leakage (C:L/I:L, A:N).
Primary rating from Vendor (ibm).
CVSS VectorVendor: ibm
Lifecycle Timeline
1DescriptionCVE.org
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by an HTTP request smuggling vulnerability.
AnalysisAI
HTTP request smuggling in IBM WebSphere Application Server Liberty - the runtime bundled with IBM CICS TX Advanced 10.1 - lets remote, unauthenticated attackers desynchronize HTTP message framing between an upstream HTTP parser and the Liberty backend, so a smuggled request can be processed as if it came from the trusted front-end, with low confidentiality and integrity impact on subsequent requests sharing the connection. Exploitation requires a multi-tier topology (reverse proxy, load balancer, or CDN in front of or behind Liberty) where the two parsers disagree on Content-Length/Transfer-Encoding or chunked framing, and is rated high complexity because the specific parsing gap must be discovered and precisely crafted while connection reuse must be achievable; no user interaction is required. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires a deployment where IBM WebSphere Application Server Liberty (as bundled in CICS TX Advanced 10.1) sits behind or in front of another HTTP parser (reverse proxy, load balancer, or CDN) such that a request-framing discrepancy can be exploited - request smuggling is only impactful when a front-end and back-end disagree on message boundaries on a shared/keep-alive connection. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a genuine but moderate-priority issue, consistent with its 4.8 (Medium) vendor CVSS. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the vendor fix from IBM's advisory at https://www.ibm.com/support/pages/node/7287740 - patch availability is confirmed by the vendor, but the provided data does not specify an exact fixed version or fix-pack number, so obtain the precise Liberty/CICS TX Advanced 10.1 fix level from that advisory before upgrading. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Cics Tx Advanced
View allVirtual host isolation bypass in IBM WebSphere Application Server and WebSphere Application Server Liberty, as bundled i
HTTP request smuggling in IBM WebSphere Application Server and WebSphere Application Server Liberty - as bundled in IBM
HTTP request smuggling (CWE-444) in IBM WebSphere Application Server 8.5, 9.0, and Liberty lets an authenticated, low-pr
Same weakness CWE-444 – HTTP Request/Response Smuggling
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today