CVE-2026-93907
No fix known EPSS <1%CVSS 8.1
IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass authentication by exploiting a flaw in the CSIv2 inbound propagation handler.
Products: ibm websphere_application_server