CVE-2026-93895
CVE-2026-93895 · IBM WebSphere Application Server Liberty Improper Access Control
This page contains facts from public vulnerability sources. Check the original advisory before updating.
IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to bypass access controls configured on gRPC service methods.
CVSS 9.1 · Critical · EPSS 0.4%
- Published
- Updated
Affected products and versions
websphere application server - liberty
- Versions
- ≥ 20.0.0.12, ≤ 26.0.0.10: Affected (semver)
No fix published