CVE-2026-93907 — IBM WebSphere Application Server is affected by a bypass authentication vulnerability
IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass authentication by exploiting a flaw in the CSIv2 inbound propagation handler.
Published: 2026-10-13 · CVSS: 8.1 · CVSS 3.1
IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass authentication by exploiting a flaw in the CSIv2 inbound propagation handler.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7