CVE-2026-103499 — IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service

CVE-2026-103499

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service PUBLISHED

Description (CNA)

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 Liberty could allow a remote unauthenticated attacker to cause a denial of service due to uncontrolled resource consumption.

Affected (CNA)

Vendor / product	Versions
IBM / WebSphere Application Server - Liberty	affected 17.0.0.3 through 26.0.0.10
IBM / WebSphere Application Server	affected 8.5; affected 9.0

CWE

CWE-400

References

https://www.ibm.com/support/pages/node/7292214

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.