Vulnerability Details CVE-2026-9336
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a denial of service, caused by sending a specially-crafted HTTP request to an administrative endpoint. A remote attacker could exploit this vulnerability to cause the server to exhaust filesystem space.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 12.8%
CVSS Severity
CVSS v3 Score 6.5
Products affected by CVE-2026-9336
-
cpe:2.3:a:ibm:websphere_application_server:9.0.0.0
-
cpe:2.3:a:ibm:websphere_application_server:9.0.5.1
-
cpe:2.3:a:ibm:websphere_application_server:9.0.5.15
-
cpe:2.3:a:ibm:websphere_application_server:9.0.5.16
-
cpe:2.3:a:ibm:websphere_application_server:9.0.5.20
-
cpe:2.3:a:ibm:websphere_application_server:9.0.5.21
-
cpe:2.3:a:ibm:websphere_application_server:9.0.5.22
-
cpe:2.3:a:ibm:websphere_application_server:9.0.5.24
-
cpe:2.3:a:ibm:websphere_application_server:9.0.5.25
-
cpe:2.3:a:ibm:websphere_application_server:9.0.5.26
-
cpe:2.3:a:ibm:websphere_application_server:9.0.5.27