CVE-2026-15887

IBM WebSphere Application Server versions 9.0 and 8.5 are vulnerable to a blind server-side request forgery (SSRF) issue when handling SOAP requests, which could allow an attacker to manipulate requests and potentially access internal resources. Organizations using these versions should prioritize remediation to mitigate the risk of unauthorized access and data exposure.