CVE-2026-105442
Awaiting Analysis Awaiting Analysis - Queue

IBM WebSphere Denial of Service via Insecure Deserialization

Publication date: 2026-10-13

Last updated on: 2026-10-14

Assigner: IBM Corporation

Description
IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 Liberty could allow a remote attacker to cause a denial of service caused by an insecure deserialization in the messaging service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-13
Last Modified
2026-10-14
Generated
2026-10-19
AI Q&A
2026-10-14
EPSS Evaluated
2026-10-18
NVD
CVE-2026-105442
EUVD
EUVD-2026-100493

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
IBM WebSphere Application Server 8.5
IBM WebSphere Application Server 9.0
IBM WebSphere Application Server - Liberty 17.0.0.3

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-502 The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an insecure deserialization flaw in the messaging service of IBM WebSphere Application Server versions 8.5, 9.0, and IBM WebSphere Application Server - Liberty versions 17.0.0.3 through 26.0.0.10. It allows a remote attacker to cause a denial of service by exploiting the insecure deserialization process.

Impact Analysis

The vulnerability can lead to a denial of service, causing the affected IBM WebSphere servers to become unavailable. This could disrupt services relying on these servers, leading to downtime and potential loss of functionality for applications and systems using the messaging service.

Mitigation Strategies

Apply the latest IBM WebSphere Application Server or Liberty updates to address the insecure deserialization issue in the messaging service.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-105442. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart