Security Bulletin: IBM WebSphere Application Server is affected by an Allocation of Resources Without Limits or Throttling vulnerability due to Apache CXF ( CVE-2026-107937)

Summary There is a vulnerability in the Apache CXF library that affects IBM WebSphere Application Server. Vulnerability Details CVEID:CVE-2026-107937 DESCRIPTION: In Apache CXF, the parser for multipart/MTOM attachment part headers did not fully enforce the configured attachment-max-header-size...