CVE-2026-93441 PUBLISHED

IBM QRadar SIEM HTTP Receiver protocol is vulnerable to a denial of service

Assigner: ibm
Reserved: 17.09.2026 Published: 20.10.2026 Updated: 20.10.2026

IBM QRadar SIEM could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CVSS Score: 8.6

Product Status

Vendor IBM
Product QRadar Security Information and Event Management
Versions
  • affected from 7.4-20210823144546 to 7.5-20260930064858 (incl.)
  • affected from 7.6-20260330053257 to 7.6-20260930064910 (incl.)

Solutions

IBM strongly encourages customers to update their systems promptly.

ProductProtocolVersionFixIBM QRadar SIEMHTTP Receiver 7.5 PROTOCOL-HTTPReceiver-7.5-20260930064859.noarch.rpm https://www.ibm.com/support/fixcentral/swg/selectFixes IBM QRadar SIEMHTTP Receiver 7.6 PROTOCOL-HTTPReceiver-7.6-20260930064911.noarch.rpm https://www.ibm.com/support/fixcentral/swg/selectFixes

These RPMs will be updated as part of QRadar Auto Update https://www.ibm.com/docs/en/qsip/7.6.0 where enabled.

References

Problem Types

  • CWE-400 Uncontrolled Resource Consumption CWE