---
id: CVE-2026-93441
title: IBM QRadar SIEM HTTP Receiver protocol is vulnerable to a denial of service
summary: >-
  IBM QRadar SIEM could allow a remote attacker to cause a denial of service due
  to uncontrolled resource consumption.
severity: high
cvss: 8.6
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H'
cvssSource: cna
cwe:
  - CWE-400
vendor: IBM
product: QRadar Security Information and Event Management
affected:
  - >-
    qradar_security_information_and_event_management >= 7.4-20210823144546 <=
    7.5-20260930064858
  - >-
    qradar_security_information_and_event_management >= 7.6-20260330053257 <=
    7.6-20260930064910
published: '2026-10-20'
updated: '2026-10-20'
sourceUpdated: '2026-10-20T21:51:16.499Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-93441'
references:
  - url: 'https://www.ibm.com/support/pages/node/7292244'
tags:
  - cve.org
ingestedAt: '2026-10-20T22:23:33.693Z'
---

## Overview

IBM QRadar SIEM could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.

## Affected

- `qradar_security_information_and_event_management >= 7.4-20210823144546 <= 7.5-20260930064858`
- `qradar_security_information_and_event_management >= 7.6-20260330053257 <= 7.6-20260930064910`

## Remediation

IBM strongly encourages customers to update their systems promptly.

ProductProtocolVersionFixIBM QRadar SIEMHTTP Receiver 7.5 PROTOCOL-HTTPReceiver-7.5-20260930064859.noarch.rpm https://www.ibm.com/support/fixcentral/swg/selectFixes IBM QRadar SIEMHTTP Receiver 7.6 PROTOCOL-HTTPReceiver-7.6-20260930064911.noarch.rpm https://www.ibm.com/support/fixcentral/swg/selectFixes 





These RPMs will be updated as part of  QRadar Auto Update https://www.ibm.com/docs/en/qsip/7.6.0  where enabled.