CVE-2026-15325

No fix known EPSS <1%CVSS 8.7

IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty is vulnerable to HTTP request smuggling due to improper handling of TRACE requests.

Published 2026-07-28 · CVE record · OSV

Products: ibm websphere_application_server, IBM WebSphere Application Server Liberty