Vulnerability Details CVE-2026-9171
IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 23.9%
CVSS Severity
CVSS v3 Score 7.5
Products affected by CVE-2026-9171
-
cpe:2.3:a:ibm:powervm_novalink:2.2.0
-
cpe:2.3:a:ibm:powervm_novalink:2.2.1.1
-
cpe:2.3:a:ibm:powervm_novalink:2.3.0
-
cpe:2.3:a:ibm:powervm_novalink:2.3.1