CVE-2026-95695CWE-863broken-access-control
CVE-2026-95695
High · published October 14, 2026
What it is
IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to bypass security restrictions due to incorrect authorization.
The record
Technical detail
- CVSS v3.1
- 7.4 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00330 · 24.9th percentile
- Weakness
- CWE-863 · Incorrect Authorization
- Published
- 2026-10-14T01:19Z
Affected products (1)
| Product | Versions | Fixed in |
|---|
| ibm/websphere_application_server | ≥ 20.0.0.12, < 26.0.0.11 | 26.0.0.11 |
References (1)
EPSS history
Timeline