CVE-2026-11722 is an HTTP request smuggling vulnerability affecting IBM WebSphere Application Server and WebSphere Application Server Liberty. HTTP request smuggling vulnerabilities occur when an attacker exploits inconsistencies in the way different HTTP devices handle requests, potentially allowing malicious requests to be processed in unintended ways. The vulnerability has a CVSS 3.1 base score of 4.8 (medium severity), with network attack vector, high attack complexity, no privileges required, no user interaction, and impacts confidentiality and integrity to a limited extent. No detailed technical or remediation information is provided in the source data.

The vulnerability could allow an attacker to manipulate HTTP requests to interfere with the normal processing of web traffic, potentially leading to limited confidentiality and integrity impacts. There is no indication of availability impact or known exploitation in the wild. The medium severity score reflects these limited impacts and the high complexity required to exploit.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or workaround information is provided in the available data. Users should monitor IBM security advisories for updates and apply patches or mitigations once available.