CVE-2026-15057 affects IBM WebSphere Application Server - Liberty versions 17.0.0.3 through 26.0.0.7. The vulnerability is due to uncontrolled heap allocation, which can be triggered remotely without authentication or user interaction, resulting in denial of service by exhausting memory resources. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, but high impact on availability. No patch or remediation information is provided in the source data.

Successful exploitation results in denial of service by causing uncontrolled heap allocation, which can exhaust system memory and disrupt the availability of the IBM WebSphere Application Server - Liberty instance. There is no impact on confidentiality or integrity according to the CVSS vector. No known exploits have been reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch information is provided, users should monitor IBM security advisories for updates. Until a fix is available, consider limiting exposure of affected services to untrusted networks to reduce risk.