HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-15280 — IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 ND Collecti...

·Source: NIST NVD

Updated:

Executive Summary

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 ND Collective Controller is affected by a path-segment injection vulnerability in the collective routing mechanism.

Analysis

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 ND Collective Controller is affected by a path-segment injection vulnerability in the collective routing mechanism. CVSS Score: 7.5. Published: 2026-07-28T21:17:27.640.

Indicators of Compromise (3)

CVE (1)
CVE-2026-15280
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Jul 28, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

Patelco Credit Union invests in Payfinia CUSO

Payfinia, an independent payment services firm providing an open payments framework, today announced a strategic partnership with Dublin, Calif.-based Patelco Credit Union (‘Patelco’ – $9.5 billion in assets and more than 550,000 members), marked by the credit union’s investment* in the Payfinia Credit Union Service Organization (CUSO).

Finextra
MEDIUMVulnerability

Agent Val Now Validates the Entire Attack Surface: From Network to Host

Powered by TruConfirm — Exploit Validation That Now Runs on the Network and the Host Executive Summary Qualys TruConfirm now validates exploitability across the entire attack surface, not just the network. Cloud Agent-Based TruConfirm brings the same proof-based validation model to the endpoint, closing the gap on local, kernel, browser, and post-authentication CVEs that network […]

Qualys Blog
MEDIUMVulnerability

Visa to Acquire Fraud Intelligence Firm BioCatch for $2.4 Billion

The payments giant says BioCatch’s behavioral and device intelligence will help financial institutions combat account takeovers, scams and other forms of digital fraud. The post Visa to Acquire Fraud Intelligence Firm BioCatch for $2.4 Billion appeared first on SecurityWeek .

SecurityWeek