CVE-2026-15325 — IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities

CVE-2026-15325

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities PUBLISHED

Description (CNA)

IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty is vulnerable to HTTP request smuggling due to improper handling of TRACE requests.

Affected (CNA)

Vendor / product	Versions
IBM / WebSphere Application Server	affected 9.0; affected 8.5
IBM / WebSphere Application Server - Liberty	affected 17.0.0.3 through 26.0.0.7

CWE

CWE-444

References

https://www.ibm.com/support/pages/node/7281625

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.