CVE-2026-93909
CVE-2026-93909 · IBM WebSphere Application Server Liberty is affected by an authentication bypass
This page contains facts from public vulnerability sources. Check the original advisory before updating.
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 is vulnerable by an authentication bypass vulnerability when samlWeb-2.0 feature is enabled.
CVSS 9.1 · Critical · EPSS 0.3%
- Published
- Updated
Affected products and versions
websphere application server - liberty
- Versions
- ≥ 17.0.0.3, ≤ 26.0.0.10: Affected (semver)
No fix published