{"uuid": "95be51cb-5c30-4523-bcc5-5cdc86c84360", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19646", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117249463814841150", "content": "CVE-2026-19646 (CRITICAL, CVSS 9.1) affects IBM Common Licensing 9.0.x & ART 9.0. Improper Host header validation enables remote redirection to attacker domains. No patch yet \u2014 monitor IBM guidance. https://radar.offseq.com/threat/cve-2026-19646-cwe-1149-sei-cert-oracle-secure-coding-standard-for-java-guidelines-15-platform-9a01f253f72c9218 #OffSeq #Vuln #IBM #InfoSec", "creation_timestamp": "2026-09-11T00:00:37.215348Z"}