CVE-2026-15064

No fix known EPSS <1%CVSS 8.7

IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty is vulnerable to HTTP Response Smuggling due to improper handling of non-standard HTTP version tokens.