CVE-2026-15064 — IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities

CVE-2026-15064

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities PUBLISHED

Description (CNA)

IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty is vulnerable to HTTP Response Smuggling due to improper handling of non-standard HTTP version tokens.

Affected (CNA)

Vendor / product	Versions
IBM / WebSphere Application Server	affected 9.0; affected 8.5
IBM / WebSphere Application Server - Liberty	affected 17.0.0.3 through 26.0.0.7

CWE

CWE-444

References

https://www.ibm.com/support/pages/node/7281625

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.