Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-9071

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by Uncontrolled Resource Consumption

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ibm

Description

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM WebSphere Application Server

  • 9.0.0 to ≤ 7.0.2 Interim Fix 035affected
  • 8.5.0 to ≤ 7.0.3 Interim Fix 017affected

IBM WebSphere Application Server - Liberty

  • 17.0.0.3 to ≤ 26.0.0.6affected

References