HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-15064 — IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Serv...

·Source: NIST NVD

Updated:

Executive Summary

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to HTTP Response Smuggling due to improper handling of non-standard HTTP version tokens.

Analysis

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to HTTP Response Smuggling due to improper handling of non-standard HTTP version tokens. CVSS Score: 8.7. Published: 2026-07-28T21:17:27.493.

Indicators of Compromise (3)

CVE (1)
CVE-2026-15064
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Jul 28, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerability

1Password CEO: AI Spending Needs Identity-Based Governance

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/1password-ceo-ai-spending-needs-identity-based-governance-image_small-6-a-32351.jpg" align=right hspace=4><b>Human Oversight Remains Essential as AI Spending Accelerates Across Enterprises</b><br>1Password CEO David Faugno says enterprises need identity-driven AI governance that connects users, models, spending and business outcom

Bank Info Security
MEDIUMVulnerability

Ghost Credentials Expose Cloud Systems to Hidden Identity Risks

Security researcher Aleksandr Krasnov reveals dormant non-human identities can create security blind spots and releases NHI Hound, an open source tool to sniff out trust paths.

Dark Reading
MEDIUMVulnerability

CubePilot drone software dev hit by DNS hijacking to intercept traffic

CubePilot, an Australian firm that designs flight controllers for drones (UAVs), announced a severe operational disruption caused by a DNS hijacking attack. [...]

BleepingComputer