Threats·Cloud & SaaSHighIBM WebSphere Liberty HTTP/2 HPACK Memory Exhaustion Flaw CVE-2026-93909 RemediatedIBM resolves a denial of service vulnerability in WebSphere Application Server Liberty (CVE-2026-93909) where malformed HTTP/2 HPACK frames exhaust JVM heap memory.CST Newsroom14 Oct 20268 min read