High severity8.7NVD Advisory· Published Jul 28, 2026· Updated Sep 23, 2026
CVE-2026-15064
CVE-2026-15064
Description
IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty is vulnerable to HTTP Response Smuggling due to improper handling of non-standard HTTP version tokens.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
49.0, 8.5+ 2 more
- (no CPE)range: 9.0, 8.5
- cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*range: >=8.5.0.0,<8.5.5.31
- cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:liberty:*:*:*range: >=17.0.0.3,<26.0.0.8
- Range: 17.0.0.3 - 26.0.0.7
Patches
Vulnerability mechanics
References
1- www.ibm.com/support/pages/node/7281625nvdVendor Advisory
News mentions
0No linked articles in our index yet.