NetSight
high8.7

CVE-2026-15325

IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty is vulnerable to HTTP request smuggling due to improper handling of TRACE reque…

Impact

IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty is vulnerable to HTTP request smuggling due to improper handling of TRACE requests.

Affected products

VendorProductAffected versions
IbmWebsphere Application Server
from 8.5.0.0 before 8.5.5.31
from 9.0.0.0 before 9.0.5.29
from 17.0.0.3 before 26.0.0.8

Weakness classification

References