CVE-2026-15328 IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty is vulnerable to HTTP request smuggling

Description

IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty is vulnerable to HTTP request smuggling.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
WebSphere Application Server	9.0	Pas de correctif indiqué
WebSphere Application Server	8.5	Pas de correctif indiqué
WebSphere Application Server - Liberty 17.0	17.0.0.3 → 26.0.0.7	Pas de correctif indiqué

Autres CVE de WebSphere Application Server

Les 185 CVE de WebSphere Application Server →

CVE-2026-101294 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and… 8.7 Élevée CVE-2026-105442 IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty 17.0.0.3 through… 7.5 Élevée CVE-2026-93907 IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass authentication by exploiting a… 8.1 Élevée CVE-2026-95680 IBM WebSphere Application Server 8.5, and 9.0 could allow an authenticated attacker to bypass authorization leading to… 8.0 Élevée