{"id":"CVE-2026-4410","title":"IBM WebSphere Application Server - Liberty 19.0.0.7 through 26.0.0.5 and IBM WebSphere Application Server 9.0, and 8.5 and WebSphere Application Server Liberty are vulnerable to a denial of service, caused by sending a specially-crafted …","summary":"IBM WebSphere Application Server - Liberty 19.0.0.7 through 26.0.0.5 and IBM WebSphere Application Server 9.0, and 8.5 and WebSphere Application Server Liberty are vulnerable to a denial of service, caused by sending a specially-crafted …","severity":"medium","cvss":4.8,"cvssVector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-400"],"vendor":"ibm","product":"websphere_application_server","affected":["websphere_application_server >= 8.5.0.0, <= 8.5.5.29","websphere_application_server >= 9.0.0.0, <= 9.0.5.27","websphere_application_server >= 19.0.0.7, <= 26.0.0.5"],"published":"2026-05-27","updated":"2026-10-14","sourceUpdated":"2026-10-14T20:10:00.190","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-4410","references":[{"url":"https://www.ibm.com/support/pages/node/7273424","label":"psirt@us.ibm.com"}],"tags":["nvd"],"epss":0.00689,"epssPercentile":0.51656,"ingestedAt":"2026-10-14T20:53:12.320Z","slug":"CVE-2026-4410","body":"## Overview\n\nIBM WebSphere Application Server - Liberty 19.0.0.7 through 26.0.0.5 and IBM WebSphere Application Server 9.0, and 8.5 and WebSphere Application Server Liberty are vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources.\n\n## Affected\n\n- `websphere_application_server >= 8.5.0.0, <= 8.5.5.29`\n- `websphere_application_server >= 9.0.0.0, <= 9.0.5.27`\n- `websphere_application_server >= 19.0.0.7, <= 26.0.0.5`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":27,"depthScoreParts":{"impact":26.4,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}