CVE-2026-93895

IBM WebSphere Application Server Liberty Improper Access Control PUBLISHED

Description (CNA)

IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to bypass access controls configured on gRPC service methods.

Affected (CNA)

Vendor / product	Versions
IBM / WebSphere Application Server - Liberty	affected 20.0.0.12 through 26.0.0.10

CWE

CWE-284

References

https://www.ibm.com/support/pages/node/7292228

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.