Product
IBM WebSphere Application Server and Liberty are susceptible to an unauthenticated remote denial-of-service attack via CVE-2026-103499, which permits uncontrolled resource consumption.