CVE-2026-93895
IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to bypass access controls configured on gRPC service methods.
Published Oct 13, 2026 · updated Oct 13, 2026
IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to bypass access controls configured on gRPC service methods.
Timeline
Detection, updates, and resolution for this record.
Oct 13, 2026 · Catalog
Detected
IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to bypass access controls configured on gRPC service methods.
Sources
- CVE.orgCVE-2026-93895
Official CVE identifier
cve.org - NIST NVDCVE-2026-93895
IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to bypass access controls configured on gRPC service methods.
nvd.nist.gov