Skip to content
Threat Feed
Subscribe

Tag

Path-Segment-Injection

1 brief RSS
high advisory

IBM WebSphere Application Server Liberty Path-Segment Injection Vulnerability (CVE-2026-15280)

A path-segment injection vulnerability (CVE-2026-15280) in the collective routing mechanism of IBM WebSphere Application Server - Liberty versions 17.0.0.3 through 26.0.0.8 ND Collective Controller allows an unauthenticated attacker to inject arbitrary path segments, potentially leading to information disclosure.

WebSphere Application Server - Liberty 17.0.0.3 +45 vulnerability path-segment-injection information-disclosure websphere ibm
1c