CVE-2026-93909
No fix known EPSS <1%CVSS 9.1
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 is vulnerable by an authentication bypass vulnerability when samlWeb-2.0 feature is enabled.
Products: IBM WebSphere Application Server Liberty