Is CVE-2026-15328 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-15328?

CVE-2026-15328 has a CVSS v3 severity of HIGH (7.4).

Back

CVE-2026-15328

Description

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to HTTP request smuggling.