SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2026-15328

HIGH · CVSS 7.4 EPSS 0.23%

Source: NVD + CISA KEV + EPSS · Published 2026-07-28 · Last synced 2026-08-27

CyberRota Analysis

AI-Generated

IBM WebSphere Application Server versions 9.0, 8.5, and Liberty 17.0.0.3 through 26.0.0.7 are susceptible to HTTP request smuggling attacks, which can allow an attacker to manipulate requests and responses between clients and servers. This vulnerability poses a significant risk as it may lead to unauthorized access, data leakage, or further exploitation of the application environment. Organizations using these versions should prioritize patching to mitigate potential threats.

CVE
CVE-2026-15328
Severity
HIGH
CVSS
7.4
EPSS
0.23%

Original NVD Description

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to HTTP request smuggling.

Related CVEs

Other vulnerabilities affecting the same vendor(s)