CVE-2026-11541CWE-444

Inconsistent Interpretation of HTTP Requests in CICS Transaction Gateway for Multiplatforms.

High · published June 30, 2026

CVSS v3.1
7.4
EPSS
0%
Percentile
34.9
In the wild
Unconfirmed
What it is

IBM CICS Transaction Gateway for Multiplatforms 9.1, 9.2, 9.3, and 10.1 IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are affected by an HTTP request smuggling vulnerability.

The record
Technical detail
CVSS v3.1
7.4 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00417 · 34.9th percentile
Weakness
CWE-444 · Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
Published
2026-06-30T20:56Z
EPSS history
Timeline
  • 30 JUN 20:56Z
    Inconsistent Interpretation of HTTP Requests in CICS Transaction Gateway for Multiplatforms.
    cvelistv5