IBM Cics Tx Advanced vulnerabilities

4 CVEs affecting IBM Cics Tx Advanced, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-11722, published 2026-09-18.

More from IBM.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-11549, published 2026-09-18. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a virtual host bypass vulnerability.
• CVE-2026-11722, published 2026-09-18. Medium severity, CVSS 4.8. EPSS: 0.2% chance of exploitation in the next 30 days. IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by an HTTP request smuggling vulnerability.
• CVE-2026-11548, published 2026-09-18. Medium severity, CVSS 4.8. EPSS: 0.2% chance of exploitation in the next 30 days. IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by an HTTP request smuggling vulnerability.
• CVE-2026-10841, published 2026-09-18. Medium severity, CVSS 4.8. EPSS: 0.2% chance of exploitation in the next 30 days. IBM WebSphere Application Server 8.5, 9.0, and Liberty are vulnerable to HTTP request smuggling.