CVE-2026-93441

{
  "etk_id": "ETK-2026-2231",
  "cve_id": "CVE-2026-93441",
  "display_id": "CVE-2026-93441",
  "ghsa_id": "GHSA-f3c3-ppjc-gwr4",
  "euvd_id": "EUVD-2026-106860",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Uncontrolled resource consumption in QRadar SIEM HTTP Receiver",
  "summary": "IBM QRadar SIEM's HTTP Receiver protocol is affected by uncontrolled resource consumption. A remote unauthenticated attacker who can reach the affected interface can exhaust resources and disrupt service.",
  "mitigation": "Restrict network access to the HTTP Receiver protocol to trusted sources and apply rate limiting or upstream filtering where possible. Monitor the service for abnormal resource use and apply IBM updates when a fixed release is published.",
  "vendor": "IBM",
  "product": "QRadar Security Information and Event Management",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 7.4-20210823144546, <= 7.5-20260930064858",
        ">= 7.6-20260330053257, <= 7.6-20260930064910"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "QRadar Security Information and Event Management",
      "purl": null
    }
  ],
  "cwes": [
    400
  ],
  "cvss_score": 8.6,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 11.544676883333333,
  "t0_at": "2026-10-20T21:51:16.499000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-10-20T21:51:16.499000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-20T21:51:16.499000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93441"
    }
  }
}