CVE-2026-10571

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server - Liberty versions 17.0.0.3 through 26.0.0.8

Description An insecure deserialization issue allows a low-privileged administrative user to cause a denial of service by consuming system resources. This occurs when the restConnector-2.0 feature is enabled. Insecure deserialization is a condition where untrusted data is used to abuse the logic of an application to execute arbitrary code or crash the system.

Recommendations As a temporary mitigation, disable the restConnector-2.0 feature. At the moment, there is no information about a newer version that contains a fix for this vulnerability.