CVE-2026-95680IBM WebSphere Application Server is affected by an authorization bypass

Description

IBM WebSphere Application Server 8.5, and 9.0 could allow an authenticated attacker to bypass authorization leading to administrative impersonation across the cell.

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

References and patches

• https://www.ibm.com/support/pages/node/7292213 vendor-advisorypatch