Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-93909

IBM WebSphere Application Server Liberty is affected by an authentication bypass

Published
Last modified
Status
published
Known exploitation
Not listed in CISA KEV
Fix
Fix or patch referenced
Public exploit
None on Exploit-DB
CISA SSVC
  • Exploitation: none
  • Automatable: yes
  • Technical impact: total
?

Decision points from CISA's Vulnrichment, assessed (SSVC 2.0.3).

SSVC documentation

Summary

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 is vulnerable by an authentication bypass vulnerability when samlWeb-2.0 feature is enabled.

Affected versions

  • IBM WebSphere Application Server - Liberty

    From 17.0.0.3 · through 26.0.0.10

References 1

ibm.com