Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| IBM | WebSphere Application Server | affected |
|
|||||||||
| IBM | WebSphere Application Server - Liberty | affected |
|
No data.
No data.
| Vendor | Product | Confidence | Versions | ||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| Ibm | Cics Tx Advanced | 95% |
|
Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .
Vendor Solution
IBM strongly recommends addressing the vulnerabilities now by applying the fix pack(s) listed below. For IBM WebSphere Application Server traditional: For V9.0.0.0 through 9.0.5.28: · Apply Fix Pack 9.0.5.29 https://www.ibm.com/support/pages/node/7285876 (availability September 2026) or later fix pack. For V8.5.0.0 through 8.5.5.30: · Apply Fix Pack 8.5.5.31 https://www.ibm.com/support/pages/node/7285869 (availability September 2026) or later fix pack. For IBM WebSphere Application Server Liberty 17.0.0.3 - 26.0.0.8: · Apply Liberty Fix Pack 26.0.0.9 https://www.ibm.com/support/pages/node/7285875 (availability September 2026) or later fix pack.
Tracking
Sign in to view the affected projects.
No advisories yet.
| Link | Providers |
|---|---|
| https://www.ibm.com/support/pages/node/7287740 |
|
Fri, 18 Sep 2026 21:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a virtual host bypass vulnerability. | |
| Title | Multiple security vulnerabilities may affect IBM WebSphere Liberty that is shipped with IBM CICS TX Advanced. | |
| First Time appeared |
Ibm
Ibm cics Tx Advanced |
|
| Weaknesses | CWE-284 | |
| CPEs | cpe:2.3:a:ibm:cics_tx_advanced:10.1.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:cics_tx_advanced:10.1:*:*:*:*:*:*:* |
|
| Vendors & Products |
Ibm
Ibm cics Tx Advanced |
|
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: ibm
Published:
Updated: 2026-10-22T18:53:28.715Z
Reserved: 2026-06-08T03:27:16.708Z
Link: CVE-2026-11549
Vulnrichment
Updated: 2026-09-18T19:45:34.492Z
NVD
Status : Awaiting Analysis
Published: 2026-09-18T20:17:00.923
Modified: 2026-10-22T19:17:49.217
Link: CVE-2026-11549
Redhat
No data.
OpenCVE Enrichment
Updated: 2026-09-20T01:00:11Z