CyberRota Analysis
AI-GeneratedIBM WebSphere Application Server versions 9.0, 8.5, and Liberty from 17.0.0.3 to 26.0.0.7 are susceptible to HTTP Response Smuggling due to inadequate processing of non-standard HTTP version tokens. This vulnerability could allow an attacker to manipulate HTTP responses, potentially leading to session hijacking or cache poisoning. Organizations using these versions should prioritize remediation to mitigate the risk of exploitation.
CVE
CVE-2026-15064
Severity
HIGH
CVSS
8.7
EPSS
0.22%
Original NVD Description
IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to HTTP Response Smuggling due to improper handling of non-standard HTTP version tokens.
Related CVEs
Other vulnerabilities affecting the same vendor(s)