← CVE Intelligence

CVE-2026-9071

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by Uncontrolled Resource Consumption PUBLISHED

Description (CNA)

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources.

Affected (CNA)

Vendor / productVersions
IBM / WebSphere Application Serveraffected 9.0.0 through 7.0.2 Interim Fix 035; affected 8.5.0 through 7.0.3 Interim Fix 017
IBM / WebSphere Application Server - Libertyaffected 17.0.0.3 through 26.0.0.6

CWE

CWE-400

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.