Uncontrolled Recursion in IBM WebSphere Application Server Liberty - CVE-2026-16192
Published: August 12, 2026
Vulnerability identifier: #VU141561
CSH Severity: Medium
CVSS v4: 7.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-16192
CWE-ID: CWE-674
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote user to perform a denial of service (DoS) attack.
The vulnerability occurs when the restConnector-2.0 feature is enabled. A remote user can trigger resource exhaustion and perform a denial of service (DoS) attack.
Affected software
IBM WebSphere Application Server Liberty
Enterprise Application Runtimes
WebSphere Hybrid Edition
Cloud Pak for Applications
Enterprise Application Runtimes
WebSphere Hybrid Edition
Cloud Pak for Applications
How to mitigate CVE-2026-16192
Install updates from vendor's website.