CVE-2026-10841: IBM Cics Tx Advanced

Medium severity, CVSS 4.8. EPSS: 0.2% chance of exploitation in the next 30 days.

IBM WebSphere Application Server 8.5, 9.0, and Liberty are vulnerable to HTTP request smuggling.

Affected products

• IBM Cics Tx Advanced: version 10.1 only

Published 2026-09-18. Last modified 2026-09-30.