CVE-2026-9171

IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.ibm.com/support/pages/node/7280226	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:ibm:powervm_novalink:2.2.0:::::::*
	cpe:2.3:a:ibm:powervm_novalink:2.2.1:::::::*
	cpe:2.3:a:ibm:powervm_novalink:2.2.1.1:::::::*
	cpe:2.3:a:ibm:powervm_novalink:2.3.0:::::::*
	cpe:2.3:a:ibm:powervm_novalink:2.3.0.1:::::::*
	cpe:2.3:a:ibm:powervm_novalink:2.3.1:::::::*
	cpe:2.3:a:ibm:powervm_novalink:2.3.2:::::::*

History

24 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) IBM PowerVM Novalink son vulnerables a una denegación de servicio, causada por el envío de una solicitud especialmente diseñada. Un atacante remoto podría explotar esta vulnerabilidad para hacer que el servidor consuma recursos de memoria.

Information

Published : 2026-07-17 19:17

Updated : 2026-10-24 20:10

NVD link : CVE-2026-9171

Mitre link : CVE-2026-9171

CVE.ORG link : CVE-2026-9171

JSON object : View

Products Affected

ibm

powervm_novalink

CWE

CWE-400

Uncontrolled Resource Consumption

{"id": "CVE-2026-9171", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-9171", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-21T01:51:30.916363Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@us.ibm.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "affected": [{"source": "psirt@us.ibm.com", "affectedData": [{"cpes": ["cpe:2.3:a:ibm:powervm_novalink:2.2.02.2.12.2.1.1:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:powervm_novalink:2.3.02.3.0.12.3.12.3.2:*:*:*:*:*:*:*"], "vendor": "IBM", "product": "PowerVM Novalink", "versions": [{"status": "affected", "version": "2.2.02.2.12.2.1.1"}, {"status": "affected", "version": "2.3.02.3.0.12.3.12.3.2"}], "defaultStatus": "unaffected"}]}], "published": "2026-07-17T19:17:19.520", "references": [{"url": "https://www.ibm.com/support/pages/node/7280226", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@us.ibm.com", "description": [{"lang": "en", "value": "CWE-400"}]}], "descriptions": [{"lang": "en", "value": "IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources."}, {"lang": "es", "value": "IBM PowerVM Novalink son vulnerables a una denegaci\u00f3n de servicio, causada por el env\u00edo de una solicitud especialmente dise\u00f1ada. Un atacante remoto podr\u00eda explotar esta vulnerabilidad para hacer que el servidor consuma recursos de memoria."}], "lastModified": "2026-10-24T20:10:00.137", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:powervm_novalink:2.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EAA48A51-6134-4D91-AFFE-B06CFD5835CC"}, {"criteria": "cpe:2.3:a:ibm:powervm_novalink:2.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A7E9BA94-2844-48B3-8EBA-1E8CE1D0E17D"}, {"criteria": "cpe:2.3:a:ibm:powervm_novalink:2.2.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A7B7E12C-3535-47D9-A1F1-1A178180A5F9"}, {"criteria": "cpe:2.3:a:ibm:powervm_novalink:2.3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9C195B1E-743B-43A4-9DF8-30ADDE5DE405"}, {"criteria": "cpe:2.3:a:ibm:powervm_novalink:2.3.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F937C4F3-CE12-47DD-8BAE-70AC4F831AB4"}, {"criteria": "cpe:2.3:a:ibm:powervm_novalink:2.3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5B9E4D20-720D-4239-B2E3-52454ECDBE62"}, {"criteria": "cpe:2.3:a:ibm:powervm_novalink:2.3.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E4252B01-2282-4E04-A169-3E232F76D3C3"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@us.ibm.com"}