NetSight
high8.7

CVE-2026-15064

IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty is vulnerable to HTTP Response Smuggling due to improper handling of non-standa…

Impact

IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty is vulnerable to HTTP Response Smuggling due to improper handling of non-standard HTTP version tokens.

Affected products

VendorProductAffected versions
IbmWebsphere Application Server
from 8.5.0.0 before 8.5.5.31
from 9.0.0.0 before 9.0.5.29
from 17.0.0.3 before 26.0.0.8

Weakness classification

References