Is CVE-2026-14981 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-14981?

CVE-2026-14981 has a CVSS v3 severity of HIGH (7.5).

Back

CVE-2026-14981

Description

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 are affected by a denial of service vulnerability in the HTTP channel due to unbounded allocation of resources without limits.