CVE-2026-93441 - Vulnerability Details - OpenCVE

IBM QRadar SIEM could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact partial

Vendors	Products
Ibm	Qradar Security Information And Event Management

No data.

No data.

References

Link	Providers
https://www.ibm.com/support/pages/node/7292244

History

Mon, 26 Oct 2026 18:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Tue, 20 Oct 2026 22:00:00 +0000

Type	Values Removed	Values Added
Description		IBM QRadar SIEM could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.
Title		IBM QRadar SIEM HTTP Receiver protocol is vulnerable to a denial of service
First Time appeared		Ibm Ibm qradar Security Information And Event Management
Weaknesses		CWE-400
CPEs		cpe:2.3:a:ibm:qradar_security_information_and_event_management:http:::::::*
Vendors & Products		Ibm Ibm qradar Security Information And Event Management
References		https://www.ibm.com/support/pages/node/7292244
Metrics		cvssV3_1 `{'score': 8.6, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H'}`

MITRE

Status: PUBLISHED

Assigner: ibm

Published: 2026-10-20T21:51:16.499Z

Updated: 2026-10-26T17:37:11.672Z

Reserved: 2026-09-17T22:03:39.454Z

Link: CVE-2026-93441

Vulnrichment

Updated: 2026-10-26T17:35:55.651Z

NVD

Status : Awaiting Analysis

Published: 2026-10-20T22:21:07.327

Modified: 2026-10-26T18:20:34.553

Link: CVE-2026-93441

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-93441", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2026-09-17T22:03:39.454Z", "datePublished": "2026-10-20T21:51:16.499Z", "dateUpdated": "2026-10-26T17:37:11.672Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-10-20T21:51:16.499Z"}, "title": "IBM QRadar SIEM HTTP Receiver protocol is vulnerable to a denial of service", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-400", "description": "CWE-400 Uncontrolled Resource Consumption", "type": "CWE"}]}], "affected": [{"vendor": "IBM", "product": "QRadar Security Information and Event Management", "versions": [{"status": "affected", "version": "7.4-20210823144546", "lessThanOrEqual": "7.5-20260930064858", "versionType": "custom"}, {"status": "affected", "version": "7.6-20260330053257", "lessThanOrEqual": "7.6-20260930064910", "versionType": "custom"}], "cpes": ["cpe:2.3:a:ibm:qradar_security_information_and_event_management:http:*:*:*:*:*:*:*"]}], "descriptions": [{"lang": "en", "value": "IBM QRadar SIEM could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>IBM QRadar SIEM could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.</p>"}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7292244", "tags": ["vendor-advisory", "patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH", "baseSeverity": "HIGH", "baseScore": 8.6, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H"}}], "solutions": [{"lang": "en", "value": "IBM strongly encourages customers to update their systems promptly.\n\nProductProtocolVersionFixIBM QRadar SIEMHTTP Receiver\u00a07.5 PROTOCOL-HTTPReceiver-7.5-20260930064859.noarch.rpm https://www.ibm.com/support/fixcentral/swg/selectFixes IBM QRadar SIEMHTTP Receiver\u00a07.6 PROTOCOL-HTTPReceiver-7.6-20260930064911.noarch.rpm https://www.ibm.com/support/fixcentral/swg/selectFixes \n\n\n\n\n\nThese RPMs will be updated as part of QRadar Auto Update https://www.ibm.com/docs/en/qsip/7.6.0 where enabled.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>IBM strongly encourages customers to update their systems promptly.</p><div><div><div><div><div><table><tbody><tr><td>Product</td><td>Protocol</td><td>Version</td><td>Fix</td></tr><tr><td>IBM QRadar SIEM</td><td>HTTP Receiver</td><td>\u00a07.5</td><td><a href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=IBM%20Security&product=ibm/Other+software/IBM+Security+QRadar+SIEM&release=All&platform=Linux&function=fixId&fixids=7.5.0-QRADAR-DSM-JuniperJunOS-7.5-20260826070157.noarch.rpm,7.5.0-QRADAR-PROTOCOL-HTTPReceiver-7.5-20260930064859.noarch.rpm,7.6.0-QRADAR-DSM-CitrixNetScaler-7.6-20261005125714.noarch.rpm,7.6.0-QRADAR-DSM-ArubaMobility-7.6-20261005061312.noarch.rpm,7.6.0-QRADAR-DSM-JuniperJunOS-7.6-20260826070207.noarch.rpm,7.6.0-QRADAR-DSM-CiscoMeraki-7.6-20260908194712.noarch.rpm,7.5.0-QRADAR-DSM-AmazonAWSALBAccessLogs-7.5-20260928060353.noarch.rpm,7.6.0-QRADAR-DSM-AmazonAWSALBAccessLogs-7.6-20260928060405.noarch.rpm,7.5.0-QRADAR-DSM-CiscoMeraki-7.5-20260908194704.noarch.rpm,7.5.0-QRADAR-DSM-CiscoIronPort-7.5-20260928155658.noarch.rpm,7.6.0-QRADAR-PROTOCOL-HTTPReceiver-7.6-20260930064911.noarch.rpm,7.5.0-QRADAR-DSM-ArubaMobility-7.5-20261003162837.noarch.rpm,7.6.0-QRADAR-DSM-BarracudaWebApplicationFirewall-7.6-20260813063016.noarch.rpm,7.6.0-QRADAR-DSM-CiscoIronPort-7.6-20260929090932.noarch.rpm,7.5.0-QRADAR-DSM-BarracudaWebApplicationFirewall-7.5-20260811152834.noarch.rpm,7.5.0-QRADAR-DSM-CitrixNetScaler-7.5-20261005110756.noarch.rpm&includeSupersedes=0&source=fc\" rel=\"nofollow\">PROTOCOL-HTTPReceiver-7.5-20260930064859.noarch.rpm</a></td></tr><tr><td>IBM QRadar SIEM</td><td>HTTP Receiver</td><td>\u00a07.6</td><td><a href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=IBM%20Security&product=ibm/Other+software/IBM+Security+QRadar+SIEM&release=All&platform=Linux&function=fixId&fixids=7.5.0-QRADAR-DSM-JuniperJunOS-7.5-20260826070157.noarch.rpm,7.5.0-QRADAR-PROTOCOL-HTTPReceiver-7.5-20260930064859.noarch.rpm,7.6.0-QRADAR-DSM-CitrixNetScaler-7.6-20261005125714.noarch.rpm,7.6.0-QRADAR-DSM-ArubaMobility-7.6-20261005061312.noarch.rpm,7.6.0-QRADAR-DSM-JuniperJunOS-7.6-20260826070207.noarch.rpm,7.6.0-QRADAR-DSM-CiscoMeraki-7.6-20260908194712.noarch.rpm,7.5.0-QRADAR-DSM-AmazonAWSALBAccessLogs-7.5-20260928060353.noarch.rpm,7.6.0-QRADAR-DSM-AmazonAWSALBAccessLogs-7.6-20260928060405.noarch.rpm,7.5.0-QRADAR-DSM-CiscoMeraki-7.5-20260908194704.noarch.rpm,7.5.0-QRADAR-DSM-CiscoIronPort-7.5-20260928155658.noarch.rpm,7.6.0-QRADAR-PROTOCOL-HTTPReceiver-7.6-20260930064911.noarch.rpm,7.5.0-QRADAR-DSM-ArubaMobility-7.5-20261003162837.noarch.rpm,7.6.0-QRADAR-DSM-BarracudaWebApplicationFirewall-7.6-20260813063016.noarch.rpm,7.6.0-QRADAR-DSM-CiscoIronPort-7.6-20260929090932.noarch.rpm,7.5.0-QRADAR-DSM-BarracudaWebApplicationFirewall-7.5-20260811152834.noarch.rpm,7.5.0-QRADAR-DSM-CitrixNetScaler-7.5-20261005110756.noarch.rpm&includeSupersedes=0&source=fc\" rel=\"nofollow\">PROTOCOL-HTTPReceiver-7.6-20260930064911.noarch.rpm</a></td></tr></tbody></table></div></div><p>These RPMs will be updated as part of <a href=\"https://www.ibm.com/docs/en/qsip/7.6.0?topic=tasks-automatic-updates\" rel=\"noopener noreferrer nofollow\">QRadar Auto Update</a> where enabled.</p></div></div></div>"}]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-93441", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-26T17:28:33.630436Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-26T17:37:11.672Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-93441", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-26T17:28:33.630436Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-26T17:35:55.651Z"}}], "cna": {"title": "IBM QRadar SIEM HTTP Receiver protocol is vulnerable to a denial of service", "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.6, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"cpes": ["cpe:2.3:a:ibm:qradar_security_information_and_event_management:http:*:*:*:*:*:*:*"], "vendor": "IBM", "product": "QRadar Security Information and Event Management", "versions": [{"status": "affected", "version": "7.4-20210823144546", "versionType": "custom", "lessThanOrEqual": "7.5-20260930064858"}, {"status": "affected", "version": "7.6-20260330053257", "versionType": "custom", "lessThanOrEqual": "7.6-20260930064910"}]}], "solutions": [{"lang": "en", "value": "IBM strongly encourages customers to update their systems promptly.\n\nProductProtocolVersionFixIBM QRadar SIEMHTTP Receiver\u00a07.5 PROTOCOL-HTTPReceiver-7.5-20260930064859.noarch.rpm https://www.ibm.com/support/fixcentral/swg/selectFixes IBM QRadar SIEMHTTP Receiver\u00a07.6 PROTOCOL-HTTPReceiver-7.6-20260930064911.noarch.rpm https://www.ibm.com/support/fixcentral/swg/selectFixes \n\n\n\n\n\nThese RPMs will be updated as part of QRadar Auto Update https://www.ibm.com/docs/en/qsip/7.6.0 where enabled.", "supportingMedia": [{"type": "text/html", "value": "<p>IBM strongly encourages customers to update their systems promptly.</p><div><div><div><div><div><table><tbody><tr><td>Product</td><td>Protocol</td><td>Version</td><td>Fix</td></tr><tr><td>IBM QRadar SIEM</td><td>HTTP Receiver</td><td>\u00a07.5</td><td><a href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=IBM%20Security&product=ibm/Other+software/IBM+Security+QRadar+SIEM&release=All&platform=Linux&function=fixId&fixids=7.5.0-QRADAR-DSM-JuniperJunOS-7.5-20260826070157.noarch.rpm,7.5.0-QRADAR-PROTOCOL-HTTPReceiver-7.5-20260930064859.noarch.rpm,7.6.0-QRADAR-DSM-CitrixNetScaler-7.6-20261005125714.noarch.rpm,7.6.0-QRADAR-DSM-ArubaMobility-7.6-20261005061312.noarch.rpm,7.6.0-QRADAR-DSM-JuniperJunOS-7.6-20260826070207.noarch.rpm,7.6.0-QRADAR-DSM-CiscoMeraki-7.6-20260908194712.noarch.rpm,7.5.0-QRADAR-DSM-AmazonAWSALBAccessLogs-7.5-20260928060353.noarch.rpm,7.6.0-QRADAR-DSM-AmazonAWSALBAccessLogs-7.6-20260928060405.noarch.rpm,7.5.0-QRADAR-DSM-CiscoMeraki-7.5-20260908194704.noarch.rpm,7.5.0-QRADAR-DSM-CiscoIronPort-7.5-20260928155658.noarch.rpm,7.6.0-QRADAR-PROTOCOL-HTTPReceiver-7.6-20260930064911.noarch.rpm,7.5.0-QRADAR-DSM-ArubaMobility-7.5-20261003162837.noarch.rpm,7.6.0-QRADAR-DSM-BarracudaWebApplicationFirewall-7.6-20260813063016.noarch.rpm,7.6.0-QRADAR-DSM-CiscoIronPort-7.6-20260929090932.noarch.rpm,7.5.0-QRADAR-DSM-BarracudaWebApplicationFirewall-7.5-20260811152834.noarch.rpm,7.5.0-QRADAR-DSM-CitrixNetScaler-7.5-20261005110756.noarch.rpm&includeSupersedes=0&source=fc\" rel=\"nofollow\">PROTOCOL-HTTPReceiver-7.5-20260930064859.noarch.rpm</a></td></tr><tr><td>IBM QRadar SIEM</td><td>HTTP Receiver</td><td>\u00a07.6</td><td><a href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=IBM%20Security&product=ibm/Other+software/IBM+Security+QRadar+SIEM&release=All&platform=Linux&function=fixId&fixids=7.5.0-QRADAR-DSM-JuniperJunOS-7.5-20260826070157.noarch.rpm,7.5.0-QRADAR-PROTOCOL-HTTPReceiver-7.5-20260930064859.noarch.rpm,7.6.0-QRADAR-DSM-CitrixNetScaler-7.6-20261005125714.noarch.rpm,7.6.0-QRADAR-DSM-ArubaMobility-7.6-20261005061312.noarch.rpm,7.6.0-QRADAR-DSM-JuniperJunOS-7.6-20260826070207.noarch.rpm,7.6.0-QRADAR-DSM-CiscoMeraki-7.6-20260908194712.noarch.rpm,7.5.0-QRADAR-DSM-AmazonAWSALBAccessLogs-7.5-20260928060353.noarch.rpm,7.6.0-QRADAR-DSM-AmazonAWSALBAccessLogs-7.6-20260928060405.noarch.rpm,7.5.0-QRADAR-DSM-CiscoMeraki-7.5-20260908194704.noarch.rpm,7.5.0-QRADAR-DSM-CiscoIronPort-7.5-20260928155658.noarch.rpm,7.6.0-QRADAR-PROTOCOL-HTTPReceiver-7.6-20260930064911.noarch.rpm,7.5.0-QRADAR-DSM-ArubaMobility-7.5-20261003162837.noarch.rpm,7.6.0-QRADAR-DSM-BarracudaWebApplicationFirewall-7.6-20260813063016.noarch.rpm,7.6.0-QRADAR-DSM-CiscoIronPort-7.6-20260929090932.noarch.rpm,7.5.0-QRADAR-DSM-BarracudaWebApplicationFirewall-7.5-20260811152834.noarch.rpm,7.5.0-QRADAR-DSM-CitrixNetScaler-7.5-20261005110756.noarch.rpm&includeSupersedes=0&source=fc\" rel=\"nofollow\">PROTOCOL-HTTPReceiver-7.6-20260930064911.noarch.rpm</a></td></tr></tbody></table></div></div><p>These RPMs will be updated as part of <a href=\"https://www.ibm.com/docs/en/qsip/7.6.0?topic=tasks-automatic-updates\" rel=\"noopener noreferrer nofollow\">QRadar Auto Update</a> where enabled.</p></div></div></div>", "base64": false}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7292244", "tags": ["vendor-advisory", "patch"]}], "descriptions": [{"lang": "en", "value": "IBM QRadar SIEM could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.", "supportingMedia": [{"type": "text/html", "value": "<p>IBM QRadar SIEM could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-400", "description": "CWE-400 Uncontrolled Resource Consumption"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-10-20T21:51:16.499Z"}}}, "cveMetadata": {"cveId": "CVE-2026-93441", "state": "PUBLISHED", "dateUpdated": "2026-10-26T17:37:11.672Z", "dateReserved": "2026-09-17T22:03:39.454Z", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "datePublished": "2026-10-20T21:51:16.499Z", "assignerShortName": "ibm"}, "dataVersion": "5.2"}