CVE-2026-3686: CWE-770 Allocation of Resources Without Limits or Throttling in IBM Cloud Pak for Data System
Description
IBM Cloud Pak for Data System versions 11.3.0.2 through Interim Fix 001 contain a vulnerability classified as CWE-770, which involves allocation of resources without proper limits or throttling. This flaw can lead to a denial of service condition by exhausting system resources. The vulnerability has a CVSS 3.1 base score of 6.2, indicating a medium severity level. No known exploits are reported in the wild, and no official patch or fix information is provided in the available data.
CVSS v3.1
Score 6.2medium
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-3686 affects IBM Cloud Pak for Data System 11.3.0.2 through Interim Fix 001. The vulnerability arises from improper limitation of resource allocation, allowing an attacker to cause a denial of service by exhausting resources. The CVSS vector indicates local attack vector with low complexity, no privileges required, no user interaction, and impacts availability only. No confidentiality or integrity impact is noted. There is no information on an official patch or remediation from IBM in the provided data.
Potential Impact
Successful exploitation of this vulnerability can cause denial of service by exhausting system resources, impacting the availability of the IBM Cloud Pak for Data System. There is no impact on confidentiality or integrity. No known active exploitation has been reported.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider monitoring resource usage and limiting access to trusted users to reduce the risk of resource exhaustion.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-h23f-vc89-p5f9
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-3686"]
- Database Specific Severity
- MODERATE
- Cvss Version
- 3.1
Threat ID: 6a92f7d9acd9273b49e75acc
Added to database: 08/29/2026, 15:16:41 UTC
Last enriched: 09/09/2026, 21:22:56 UTC
Last updated: 10/11/2026, 18:48:18 UTC
Views: 22
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.