CVE-2026-15057 IBM WebSphere Application Server Liberty is affected by a denial of service vulnerability

🗓️ 28 Jul 2026 20:11:58Reported by ibmType

IBM WebSphere Liberty 17.0.0.3 to 26.0.0.7 face denial of service from uncontrolled heap allocation.

Reporter	Title	Published	Views	Family All 16
IBM Security Bulletins	Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in IBM WebSphere Application Server Liberty	20 Aug 202618:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SPSS Analytic Server is affected by multiple vulnerabilities in IBM WebSphere Application Server Liberty	20 Aug 202618:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Cloud Pak for Applications, is affected by a denial of service vulnerability (CVE-2026-15057)	4 Aug 202616:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty is affected by a denial of service vulnerability (CVE-2026-15057)	29 Jul 202616:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in WebSphere Application Server Liberty	21 Aug 202620:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Enterprise Application Runtimes, is affected by a denial of service vulnerability (CVE-2026-15057)	4 Aug 202616:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Engineering Lifecycle Management products using WebSphere Application Server Liberty is affected by a denial of service vulnerability (CVE-2026-15057)	5 Aug 202606:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM WebSphere Hybrid Edition, is affected by a denial of service vulnerability (CVE-2026-15057)	4 Aug 202616:48	–	ibm
ATTACKERKB	CVE-2026-15057	28 Jul 202620:11	–	attackerkb
Circl	CVE-2026-15057	28 Jul 202622:00	–	circl

[
  {
    "vendor": "IBM",
    "product": "WebSphere Application Server - Liberty",
    "versions": [
      {
        "status": "affected",
        "version": "17.0.0.3",
        "lessThanOrEqual": "26.0.0.7",
        "versionType": "semver"
      }
    ],
    "cpes": [
      "cpe:2.3:a:ibm:websphere_application_server___liberty:17.0.0.3:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:websphere_application_server___liberty:26.0.0.7:*:*:*:*:*:*:*"
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/pages/node/7280126

28 Jul 2026 20:19Current

CVSS 3.17.5

EPSS0.00263

CWE-787