NetSight
critical9.1

CVE-2026-93895

IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to bypass access controls configured on g…

Impact

IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to bypass access controls configured on gRPC service methods.

Affected products

VendorProductAffected versions
IbmWebsphere Application Server
from 20.0.0.12 before 26.0.0.11

Weakness classification

References