CVE-2026-93895

No fix known EPSS <1%CVSS 9.1

IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to bypass access controls configured on gRPC service methods.