Is CVE-2026-9338 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-9338?

CVE-2026-9338 has a CVSS v3 severity of MEDIUM (5.3).

Back

CVE-2026-9338

Description

IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to trigger excessive resource consumption, potentially leading to reduced availability of the affected service.