Is CVE-2026-93895 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-93895?

CVE-2026-93895 has a CVSS v3 severity of CRITICAL (9.1).

Back

CVE-2026-93895

Description

IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to bypass access controls configured on gRPC service methods.