CVE-2026-9171: Vulnerabilities in IBM WebSphere Application affects IBM PowerVM Novalink.
Published Jul 16, 2026
·Updated
IBM PowerVM Novalink are vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources.
Other sources
IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources.
— IBM
Affected Software
3 affected components
IBM PowerVM Novalink
IBM PowerVM Novalink<=2.2.02.2.12.2.1.1
IBM PowerVM Novalink<=2.3.02.3.0.12.3.12.3.2
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM PowerVM Novalinkto a version that resolves this vulnerability.Fixed in pvm-novalink-2.2.1.1-260708 - Upgrade
Upgrade
IBM PowerVM Novalinkto a version that resolves this vulnerability.Fixed in pvm-novalink-2.3.3-260714
Event History
Jul 16, 2026
CVE Published
via IBM·12:00 AM
Data Sourced
via IBM·12:00 AM
DescriptionAffected Software
Jul 17, 2026
CVE Published
via MITRE·06:26 PM
Data Sourced
via MITRE·06:26 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·07:17 PM
DescriptionSeverityWeakness
Apr 11, 58531
Event
via FIRST·06:31 AM