Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: IBM WebSphere Application Server - Liberty — ibm.com/support/pages/node/7292228 Clear all filters
TI-2026-73525 CVE-2026-93895 · GHSA-3r8m-rjq2-w53r

Access control bypass in IBM WebSphere Application Server Liberty

Priority MEDIUM 41

IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to bypass access controls configured on gRPC service methods.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00394 Published 2026-10-13 No fix listed CWE-284
TI-2026-73535 CVE-2026-95695 · GHSA-pxc5-x8x9-34qq

Incorrect authorization in IBM WebSphere Application Server Liberty

Priority MEDIUM 41

IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to bypass security restrictions due to incorrect authorization.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00323 Published 2026-10-13 No fix listed CWE-863
TI-2026-73536 CVE-2026-95696 · GHSA-5fmc-fgcm-wfm8

IBM WebSphere Application Server Liberty denial of service

Priority LOW 39

IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to cause a denial of service due to an uncaught exception.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00331 Published 2026-10-13 No fix listed CWE-400