Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
3047 articles · 183981 vulns · 37/41 feeds (7d)
← Back to list
7.5
CVE-2026-15280PATCHED
ibm · websphere application server - liberty

IBM WebSphere Application Server Liberty is affected by a remote code execution and path-segment injection vulnerability

Description

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 ND Collective Controller is affected by a path-segment injection vulnerability in the collective routing mechanism.

Affected Products

VendorProductVersions
ibmwebsphere application server - liberty17.0.0.3

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
ibmwebsphere applicationcert_advisory90%
ibmwebsphere application server libertycert_advisory90%

References

  • https://www.ibm.com/support/pages/node/7281633(vendor-advisory, patch)

Related News (4 articles)

Tier B
CERT-FR5d ago
Multiples vulnérabilités dans les produits IBM (31 juillet 2026)
→ No new info (linked only)
Tier D
Heise Security6d ago
IBM WebSphere Application Server: Sicherheitsproblem in Admin-Konsole gelöst
→ No new info (linked only)
Tier B
BSI Advisories7d ago
[NEU] [hoch] IBM WebSphere Application Server und Application Server Liberty: Mehrere Schwachstellen
→ No new info (linked only)
Tier C
VulDB7d ago
CVE-2026-15280 | IBM WebSphere Application Server up to 26.0.0.8 Collective Routing Mechanism injection
→ No new info (linked only)
CVSS 3.17.5 HIGH
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CISA KEV❌ No
Actively exploited❌ No
Patch available
https://www.ibm.com/support/pages/node/7281633
CWECWE-22
PublishedJul 28, 2026
Trending Score30
Source articles4
Independent4
Info Completeness0/14
Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

CRITICALCVE-2026-9198EXPKEV
Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation
Trending: 146
CRITICALCVE-2026-14446
IBM WebSphere Application Server is affected by a privilege escalation
Trending: 35
CRITICALCVE-2026-14512
IBM WebSphere Application Server is affected by an unsafe deserialization and exposure of sensitive information
Trending: 35
CRITICALCVE-2026-14529
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a server-side request forgery
Trending: 33
CRITICALCVE-2026-15435
IBM App Connect Enterprise is vulnerable to arbitrary file write vulnerability
Trending: 32

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Jul 28, 2026
Discovered by ZDM
Jul 28, 2026
Patch Available
Jul 29, 2026