CVE-2026-95680

No fix known EPSS <1%CVSS 8.0

IBM WebSphere Application Server 8.5, and 9.0 could allow an authenticated attacker to bypass authorization leading to administrative impersonation across the cell.

Published 2026-10-13 · CVE record · OSV

Products: ibm websphere_application_server