CVE-2026-15634: Inconsistent Interpretation of HTTP Requests

🗓️ 14 Sep 2026 00:00:00Reported by Rapid7Type

HTTP request smuggling in IBM WebSphere Application Server via transfer-encoding can cause XSS.

Reporter	Title	Published	Views	Family All 13
IBM Security Bulletins	Security Bulletin: Updating IBM WebSphere Liberty Profile in Identity Insight for security update	10 Sep 202619:39	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in WebSphere Liberty profile(CVE-2026-14525, CVE-2026-16192, CVE-2026-10571, CVE-2026-14976, CVE-2026-15280, CVE-2026-18499, CVE-2026-14980, CVE-2026-2482, CVE-2026-14529, CVE-2026-10841) affect Power PowerVM Novalink	22 Sep 202619:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty prior to 26.0.0.9 is affected by multiple vulnerabilities	8 Sep 202618:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server shipped with Jazz for Service Management (JazzSM) are affected by multiple vulnerabilities	18 Sep 202607:56	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of WebSphere Application Server Liberty, IBM Tivoli Application Dependency Discovery Manager is affected by multiple vulnerabilities	14 Sep 202611:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Tivoli Composite Application Manager for Application Diagnostics installed WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities	15 Sep 202607:51	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities	8 Sep 202621:18	–	ibm
CVE	CVE-2026-15634	14 Sep 202620:01	–	cve
Cvelist	CVE-2026-15634 IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities	14 Sep 202620:01	–	cvelist
EUVD	EUVD-2026-78060	14 Sep 202620:01	–	euvd