CVE-2026-4410

No fix known EPSS <1%CVSS 4.8

IBM WebSphere Application Server - Liberty 19.0.0.7 through 26.0.0.5 and IBM WebSphere Application Server 9.0, and 8.5 and WebSphere Application Server Liberty are vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources.

Published 2026-05-27 · CVE record · OSV

Products: IBM WebSphere Application Server Liberty, ibm websphere_application_server