CVE-2026-9171: IBM Powervm Novalink

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources.

Affected products

• IBM Powervm Novalink: version 2.2.0 only; version 2.2.1 only; version 2.2.1.1 only; version 2.3.0 only; version 2.3.0.1 only; version 2.3.1 only; …

Published 2026-07-17. Last modified 2026-08-11.