Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-93895

IBM WebSphere Application Server Liberty Improper Access Control

Published
Last modified
Status
published
Known exploitation
Not listed in CISA KEV
Fix
Fix or patch referenced
Public exploit
None on Exploit-DB
CISA SSVC
  • Exploitation: none
  • Automatable: no
  • Technical impact: total
?

Decision points from CISA's Vulnrichment, assessed (SSVC 2.0.3).

SSVC documentation

Summary

IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to bypass access controls configured on gRPC service methods.

Affected versions

  • IBM WebSphere Application Server - Liberty

    From 20.0.0.12 · through 26.0.0.10

References 1

ibm.com