CVE-2026-93441: CWE-400 Uncontrolled Resource Consumption in IBM QRadar Security Information and Event Management

IBM QRadar SIEM contains a CWE-400 Uncontrolled Resource Consumption vulnerability that can be exploited remotely without authentication or user interaction. Successful exploitation results in denial of service by exhausting system resources. The CVSS v3.1 base score is 8.6, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, scope change, no confidentiality or integrity impact, and high impact on availability. No known exploits are reported in the wild. The affected versions are explicitly stated, but no patch or remediation information is provided in the source data.

An attacker can remotely cause a denial of service condition in IBM QRadar SIEM by exploiting uncontrolled resource consumption. This disrupts the availability of the SIEM service, potentially impacting security monitoring and incident response capabilities. There is no impact on confidentiality or integrity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch links are provided, users should monitor IBM's advisories for updates. Until a fix is available, consider limiting exposure of the affected QRadar SIEM instances to untrusted networks and applying any recommended temporary mitigations from IBM.