CVE-2026-15325

IBM WebSphere Application Server versions 9.0, 8.5, and Liberty 17.0.0.3 through 26.0.0.7 are vulnerable to HTTP request smuggling due to improper handling of TRACE requests, which could allow an attacker to bypass security controls and potentially manipulate or intercept requests. Organizations using these versions should prioritize applying patches or mitigations to protect against potential exploitation, given the high severity rating of this vulnerability.