Skip to content
OpenAdvisories
High · 7.5 CVE-2026-11897 EUVD-2026-51147GHSA-89rj-ccwc-wmpm

IBM WebSphere Application Server Liberty is affected by a denial of service vulnerability with HTTP/2

Published Jul 30, 2026 · Updated Jul 30, 2026 · Assigned by ibm

Description

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to a denial of service, caused by sending a specially crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources.

Affected products

VendorProductAffectedFixed
IBM WebSphere Application Server - Liberty 17.0.0.3 – ≤ 26.0.0.7 —

Advisories 1

References