Denial of Service Vulnerability in IBM WebSphere Application Server
CVE-2026-10571

5.7MEDIUM

Key Information:

Vendor

IBM
Status
Websphere Application Server - Liberty
Vendor
CVE Published:
13 August 2026

What is CVE-2026-10571?

IBM WebSphere Application Server - Liberty versions 17.0.0.3 through 26.0.0.8 are susceptible to a denial of service vulnerability due to insecure deserialization. This issue allows a low-privileged administrative user to exploit the vulnerability, potentially consuming significant system resources when the restConnector-2.0 feature is enabled, which can disrupt service availability.

Affected Version(s)

WebSphere Application Server - Liberty 17.0.0.3 <= 26.0.0.8

References

https://www.ibm.com/support/pages/node/7283485
vendor-advisorypatch

CVSS V3.1

Score:
5.7
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.