IBM CICS TX Advanced version 10.1 is affected by CVE-2026-10841, a vulnerability classified under CWE-444 (Inconsistent Interpretation of HTTP Requests, or HTTP Request/Response Smuggling). This vulnerability arises from how HTTP requests are parsed inconsistently, potentially allowing an attacker to smuggle HTTP requests or responses. The CVSS 3.1 base score is 4.2, indicating a medium severity with network attack vector, high attack complexity, low privileges required, no user interaction, and impacts limited confidentiality and integrity.

The vulnerability could allow an attacker with network access and low privileges to perform HTTP request smuggling, potentially leading to limited confidentiality and integrity impacts. There is no impact on availability. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch or workaround information is provided in the available data.