Vulnerabilities

IBM WebSphere Application Server 8.5, and 9.0 could allow an authenticated attacker to bypass authorization leading to administrative impersonation…

IBM WebSphere Application Server 8.5, and 9.0 could allow an authenticated attacker to bypass authorization leading to administrative impersonation across the cell.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

IBM

Product

Java libraries / app servers, QRadar / WebSphere / Db2 / AIX / MQ / Maximo

CVSS

8.0

Exposure class

Web platform

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-95680 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 15
   CVE NVD 18d ago

   IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass authentication by exploiting a flaw in the CSIv2 inbound…

   CVSS 8.1 CVE-2026-93907 IBM