CVE-2026-93441

IBM QRadar SIEM HTTP Receiver protocol is vulnerable to a denial of service

IBM QRadar Security Information and Event ManagementApplications & CMS

CVSS

8.6High

ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV

Exploit odds (EPSS)0.33%Chance of exploitation activity in the next 30 days, higher than 24% of CVEs. Scored 23 Oct 2026FIRST EPSS

Fixed inNone listedNo source names a fixed version. Check the vendor advisory below

Published20 Oct 2026Updated 20 Oct 2026CVE List

What fixes it

No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.

IBM QRadar SIEM could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.

Text from CVE List

QRadar Security Information and Event Managementaffected: 7.4-20210823144546 through 7.5-20260930064858CVE List
QRadar Security Information and Event Managementaffected: 7.6-20260330053257 through 7.6-20260930064910CVE List