Repository navigation
CVE update for 26.0.0.9 #8512
Description
This issue is opened for updating the CVE list for 26.0.0.9 to include the following. @ayoho @cluk @clarkek123 fyi
|https://www.cve.org/CVERecord?id=CVE-2026-14529[CVE-2026-14529]
|9.4
|Server-Side Request Forgery
|17.0.0.3-26.0.0.8
|26.0.0.9
|Affects the feature:sipServlet-1.1 feature
|https://www.cve.org/CVERecord?id=CVE-2026-14981[CVE-2026-14981]
|7.5
|Denial of Service
|17.0.0.3-26.0.0.8
|26.0.0.9
|Affects the feature:servlet-3.1 feature:servlet-4.0, feature:servlet-5.0, feature:servlet-6.0, feature:servlet-6.1 features
|https://www.cve.org/CVERecord?id=CVE-2026-15064[CVE-2026-15064]
|8.7
|HTTP Response Smuggling
|17.0.0.3-26.0.0.8
|26.0.0.9
|Affects the feature:servlet-3.1 feature:servlet-4.0, feature:servlet-5.0, feature:servlet-6.0, feature:servlet-6.1 features
|https://www.cve.org/CVERecord?id=CVE-2026-15328[CVE-2026-15328]
|7.4
|HTTP Request Smuggling
|17.0.0.3-26.0.0.8
|26.0.0.9
|Affects the feature:servlet-3.1 feature:servlet-4.0, feature:servlet-5.0, feature:servlet-6.0, feature:servlet-6.1 features
|https://www.cve.org/CVERecord?id=CVE-2026-15325[CVE-2026-15325]
|8.7
|HTTP Request Smuggling
|17.0.0.3-26.0.0.8
|26.0.0.9
|Affects the feature:servlet-3.1 feature:servlet-4.0, feature:servlet-5.0, feature:servlet-6.0, feature:servlet-6.1 features
|https://www.cve.org/CVERecord?id=CVE-2026-16192[CVE-2026-16192]
|7.1
|Denial of Service
|17.0.0.3-26.0.0.8
|26.0.0.9
|Affects the feature:restConnector-2.0 feature
|https://www.cve.org/CVERecord?id=CVE-2026-10571[CVE-2026-10571]
|5.7
|Denial of Service
|17.0.0.3-26.0.0.8
|26.0.0.9
|Affects the feature:restConnector-2.0 feature
|https://www.cve.org/CVERecord?id=CVE-2026-54225[CVE-2026-54225]
|7.5
|Denial of Service
|17.0.0.3-26.0.0.8
|26.0.0.9
|Affects the feature:jaxrs-2.0 feature:jaxrs-2.1 feature:jaxws-2.2 feature:xmlWS-3.0 feature:xmlWS-4.0 features
|https://www.cve.org/CVERecord?id=CVE-2026-57819[CVE-2026-57819]
|7.5
|Denial of Service
|17.0.0.3-26.0.0.8
|26.0.0.9
|Affects the feature:jaxrs-2.0 feature:jaxrs-2.1 feature:jaxws-2.2 feature:xmlWS-3.0 feature:xmlWS-4.0 features
|https://www.cve.org/CVERecord?id=CVE-2026-64958[CVE-2026-64958]
|7.5
|Denial of Service
|17.0.0.3-26.0.0.8
|26.0.0.9
|Affects the feature:jaxrs-2.0 feature:jaxrs-2.1 feature:jaxws-2.2 feature:xmlWS-3.0 feature:xmlWS-4.0 features
Activity
8512-RK-CVE update for 26.0.0.9-1
ramkumar-k-9286 commentedon Aug 27, 2026
Hi @Faizi-AdnanFahad
Suggested updates have been incorporated to the Security vulnerability (CVE) list page.
Draft site Link: https://docs-draft-openlibertyio.mqj6zf7jocq.us-south.codeengine.appdomain.cloud/docs/latest/security-vulnerabilities.html
Please review the same and add
Developer Reviewedlabel if you are satisfied with the changes.Regards,
Ramkumar.
CC @clarkek123
Faizi-AdnanFahad commentedon Aug 28, 2026
Thank you @ramkumar-k-9286. Looks good!