Is CVE-2026-15064 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-15064?

CVE-2026-15064 has a CVSS v3 severity of HIGH (8.7).

Back

CVE-2026-15064

Description

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to HTTP Response Smuggling due to improper handling of non-standard HTTP version tokens.