CVE-2026-16192 is a denial of service vulnerability in IBM WebSphere Application Server - Liberty affecting versions 17.0.0.3 through 26.0.0.8. The issue arises from uncontrolled recursion in the restConnector-2.0 feature, which can be triggered remotely by an attacker with low privileges and no user interaction. The vulnerability impacts availability but does not affect confidentiality or integrity. No official patch or remediation level has been provided in the available data, and no known exploits are reported in the wild.

Successful exploitation results in denial of service, causing the affected server to become unavailable. There is no indication of confidentiality or integrity compromise. The attack vector is network-based with low attack complexity and requires low privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider disabling the restConnector-2.0 feature if feasible to mitigate exposure.