Is CVE-2026-15280 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-15280?

CVE-2026-15280 has a CVSS v3 severity of HIGH (7.5).

Back

CVE-2026-15280

Description

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 ND Collective Controller is affected by a path-segment injection vulnerability in the collective routing mechanism.