CVE-2026-11710 describes an HTTP request smuggling vulnerability in IBM WebSphere Application Server 8.5. The vulnerability arises from improper handling of Content-Length headers, which can allow an attacker to interfere with the processing of HTTP requests. The CVSS v3.1 base score is 6.5, with network attack vector, high attack complexity, no privileges required, no user interaction, unchanged scope, high confidentiality impact, low integrity impact, and no availability impact. No known exploits are reported in the wild, and no patch or remediation details are provided in the available data.

Successful exploitation could lead to unauthorized disclosure of information (high confidentiality impact) and limited modification of data (low integrity impact). There is no impact on system availability. The vulnerability does not require privileges or user interaction but has a high attack complexity, reducing the likelihood of exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or workaround information is provided, users should monitor IBM's official security advisories for updates. No specific mitigation steps are indicated in the provided data.