Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
7982 articles · 242779 vulns · 37/41 feeds (7d)
← Back to list
9.1
CVE-2026-93909PATCHED
ibm · websphere application server - liberty

IBM WebSphere Application Server Liberty is affected by an authentication bypass

Description

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 is vulnerable by an authentication bypass vulnerability when samlWeb-2.0 feature is enabled.

Affected Products

VendorProductVersions
ibmwebsphere application server - liberty17.0.0.3

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
ibmwebsphere applicationcert_advisory90%
ibmwebsphere application server libertycert_advisory90%

References

  • https://www.ibm.com/support/pages/node/7292236(vendor-advisory, patch)

Related News (3 articles)

Tier B
CERT-FR4d ago
Multiples vulnérabilités dans les produits IBM (16 octobre 2026)
→ No new info (linked only)
Tier B
BSI Advisories6d ago
[NEU] [hoch] IBM WebSphere Application Server und Application Server Liberty: Mehrere Schwachstellen
→ No new info (linked only)
Tier C
VulDB6d ago
CVE-2026-93909 | IBM WebSphere Application Server up to 26.0.0.10 samlWeb-2.0 improper authentication
→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.19.1 CRITICAL
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CISA KEV❌ No
Actively exploited❌ No
Patch available
https://www.ibm.com/support/pages/node/7292236
CWECWE-384
PublishedOct 13, 2026
Trending Score35
Source articles3
Independent3
Info Completeness0/14
Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

HIGHCVE-2026-109126
IBM Verify Identity Access and IBM Security Verify Access Hard-coded Credentials
Trending: 43
HIGHCVE-2026-105453
IBM Sterling Connect:Direct for Unix Improper Privilege Management
Trending: 43
HIGHCVE-2026-107366
Langflow OSS Authorization Bypass Through User-Controlled Key
Trending: 43
HIGHCVE-2026-102917
IBM i is Affected By An Improper Privilege Management Vulnerability
Trending: 39
HIGHCVE-2026-6719
IBM Concert Software Use of Insufficiently Random Values
Trending: 34

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Oct 13, 2026
Discovered by ZDM
Oct 13, 2026
Patch Available
Oct 14, 2026