Authorization Bypass in IBM WebSphere Application Server - Liberty
CVE-2026-95695

7.4HIGH

Key Information:

Vendor

IBM
Status
Websphere Application Server - Liberty
Vendor
CVE Published:
13 October 2026

What is CVE-2026-95695?

IBM WebSphere Application Server - Liberty versions 20.0.0.12 through 26.0.0.10 are affected by a vulnerability that allows remote attackers to bypass security restrictions. This issue arises from improper authorization mechanisms that can be exploited to gain unauthorized access to critical functions within the application server, potentially leading to further security breaches.

Affected Version(s)

WebSphere Application Server - Liberty 20.0.0.12 <= 26.0.0.10

References

https://www.ibm.com/support/pages/node/7292228
vendor-advisorypatch

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.