← All advisories

High severity7.4NVD Advisory· Published Jul 28, 2026· Updated Sep 23, 2026

CVE-2026-15328

CVE-2026-15328

Description

IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty is vulnerable to HTTP request smuggling.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

IBM/Websphere Application Server3 versions
cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*range: >=8.5.0.0,<8.5.5.31
- cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:liberty:*:*:*range: >=17.0.0.3,<26.0.0.8
- (no CPE)range: 9.0, 8.5, 17.0.0.3 - 26.0.0.7
IBM/Websphere Application Server Libertyllm-fuzzy
Range: 17.0.0.3 - 26.0.0.7

Patches

Vulnerability mechanics

References

1

www.ibm.com/support/pages/node/7281625nvdVendor Advisory

News mentions

0

No linked articles in our index yet.