CVE-2026-93907IBM WebSphere Application Server is affected by a bypass authentication vulnerability

Description

IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass authentication by exploiting a flaw in the CSIv2 inbound propagation handler.

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

References and patches

• https://www.ibm.com/support/pages/node/7292216 vendor-advisorypatch