8.0Alta
CVE-2026-95680IBM WebSphere Application Server is affected by an authorization bypass
Descripción
IBM WebSphere Application Server 8.5, and 9.0 could allow an authenticated attacker to bypass authorization leading to administrative impersonation across the cell.
Debilidad (CWE):
CWE-287
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| IBM | WebSphere Application Server | 8.5, 9.0 |
Referencias y parches
- https://www.ibm.com/support/pages/node/7292213 vendor-advisorypatch