CVE update for 26.0.0.9

[Faizi-AdnanFahad]

This issue is opened for updating the CVE list for 26.0.0.9 to include the following. @ayoho @cluk @clarkek123 fyi

|https://www.cve.org/CVERecord?id=CVE-2026-14529[CVE-2026-14529]
|9.4
|Server-Side Request Forgery
|17.0.0.3-26.0.0.8
|26.0.0.9
|Affects the feature:sipServlet-1.1 feature

|https://www.cve.org/CVERecord?id=CVE-2026-14981[CVE-2026-14981]
|7.5
|Denial of Service
|17.0.0.3-26.0.0.8
|26.0.0.9
|Affects the feature:servlet-3.1 feature:servlet-4.0, feature:servlet-5.0, feature:servlet-6.0, feature:servlet-6.1 features

|https://www.cve.org/CVERecord?id=CVE-2026-15064[CVE-2026-15064]
|8.7
|HTTP Response Smuggling
|17.0.0.3-26.0.0.8
|26.0.0.9
|Affects the feature:servlet-3.1 feature:servlet-4.0, feature:servlet-5.0, feature:servlet-6.0, feature:servlet-6.1 features

|https://www.cve.org/CVERecord?id=CVE-2026-15328[CVE-2026-15328]
|7.4
|HTTP Request Smuggling
|17.0.0.3-26.0.0.8
|26.0.0.9
|Affects the feature:servlet-3.1 feature:servlet-4.0, feature:servlet-5.0, feature:servlet-6.0, feature:servlet-6.1 features

|https://www.cve.org/CVERecord?id=CVE-2026-15325[CVE-2026-15325]
|8.7
|HTTP Request Smuggling
|17.0.0.3-26.0.0.8
|26.0.0.9
|Affects the feature:servlet-3.1 feature:servlet-4.0, feature:servlet-5.0, feature:servlet-6.0, feature:servlet-6.1 features

|https://www.cve.org/CVERecord?id=CVE-2026-16192[CVE-2026-16192]
|7.1
|Denial of Service
|17.0.0.3-26.0.0.8
|26.0.0.9
|Affects the feature:restConnector-2.0 feature

|https://www.cve.org/CVERecord?id=CVE-2026-10571[CVE-2026-10571]
|5.7
|Denial of Service
|17.0.0.3-26.0.0.8
|26.0.0.9
|Affects the feature:restConnector-2.0 feature

|https://www.cve.org/CVERecord?id=CVE-2026-54225[CVE-2026-54225]
|7.5
|Denial of Service
|17.0.0.3-26.0.0.8
|26.0.0.9
|Affects the feature:jaxrs-2.0 feature:jaxrs-2.1 feature:jaxws-2.2 feature:xmlWS-3.0 feature:xmlWS-4.0 features

|https://www.cve.org/CVERecord?id=CVE-2026-57819[CVE-2026-57819]
|7.5
|Denial of Service
|17.0.0.3-26.0.0.8
|26.0.0.9
|Affects the feature:jaxrs-2.0 feature:jaxrs-2.1 feature:jaxws-2.2 feature:xmlWS-3.0 feature:xmlWS-4.0 features

|https://www.cve.org/CVERecord?id=CVE-2026-64958[CVE-2026-64958]
|7.5
|Denial of Service
|17.0.0.3-26.0.0.8
|26.0.0.9
|Affects the feature:jaxrs-2.0 feature:jaxrs-2.1 feature:jaxws-2.2 feature:xmlWS-3.0 feature:xmlWS-4.0 features

[ramkumar-k-9286]

Hi @Faizi-AdnanFahad

Suggested updates have been incorporated to the Security vulnerability (CVE) list page.

Draft site Link: https://docs-draft-openlibertyio.mqj6zf7jocq.us-south.codeengine.appdomain.cloud/docs/latest/security-vulnerabilities.html

Please review the same and add Developer Reviewed label if you are satisfied with the changes.

Regards,
Ramkumar.

CC @clarkek123

[Faizi-AdnanFahad]

Thank you @ramkumar-k-9286. Looks good!