CVE-2026-15328

No fix known EPSS <1%CVSS 7.4

IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty is vulnerable to HTTP request smuggling.

Published 2026-07-28 · CVE record · OSV

Products: ibm websphere_application_server, IBM WebSphere Application Server Liberty