Is CVE-2026-95680 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-95680?

CVE-2026-95680 has a CVSS v3 severity of HIGH (8).

Back

CVE-2026-95680

Description

IBM WebSphere Application Server 8.5, and 9.0 could allow an authenticated attacker to bypass authorization leading to administrative impersonation across the cell.