EUVD-2026-112635

A flaw was found in Wildfly. A remote attacker can bypass authentication on IIOP EJB invocations as the CSIv2 security interceptor accepts ITTPrincipalName identity assertions in the service context without verifying transport-level authentication, allowing a pre-auth attacker on the port 3528 to...

CVE-2026-114488

A flaw in Wildfly allows a remote attacker to bypass authentication on IIOP EJB invocations. The CSIv2 security interceptor accepts ITTPrincipalName identity assertions in the service context without verifying transport-level authentication, enabling a pre-auth attacker on port 3528 to impersonat...

CVE-2026-114488

A flaw was found in Wildfly. A remote attacker can bypass authentication on IIOP EJB invocations as the CSIv2 security interceptor accepts ITTPrincipalName identity assertions in the service context without verifying transport-level authentication, allowing a pre-auth attacker on the port 3528 to...

CVE-2026-93907

IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass authentication by exploiting a flaw in the CSIv2 inbound propagation handler...

CVE-2026-93907 IBM WebSphere Application Server is affected by a bypass authentication vulnerability

IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass authentication by exploiting a flaw in the CSIv2 inbound propagation handler...

CVE-2026-93907 IBM WebSphere Application Server is affected by a bypass authentication vulnerability

IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass authentication by exploiting a flaw in the CSIv2 inbound propagation handler...

EUVD-2026-98688

IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass authentication by exploiting a flaw in the CSIv2 inbound propagation handler...

CVE-2026-93907

IBM WebSphere Application Server versions 8.5 and 9.0 are affected by a vulnerability that allows a remote attacker to bypass authentication. The root cause is a flaw in the CSIv2 inbound propagation handler (CWE-287: Improper Authentication). Successful exploitation can lead to high impacts on c...

Security Bulletin: IBM WebSphere Application Server is affected by a bypass authentication vulnerability (CVE-2026-93907)

Summary IBM WebSphere Application Server is affected by a bypass authentication vulnerability. Vulnerability Details CVEID:CVE-2026-93907 DESCRIPTION: IBM WebSphere Application Server could allow a remote attacker to bypass authentication by exploiting a flaw in the CSIv2 inbound propagation...

PT-2026-111575

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 8.5 and 9.0 Description A flaw in the CSIv2 inbound propagation handler allows a remote attacker to bypass authentication. Recommendations At the moment, there is no information about a newer version...

CVE-2026-93907: Improper Authentication

IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass authentication by exploiting a flaw in the CSIv2 inbound propagation handler...

EUVD-2026-55989

A flaw was found in Wildfly. A remote unauthenticated attacker can trigger OutOfMemoryError as CSIv2Util's GSS token decoder reads an attacker-controlled length field without bounds checking and attempts to allocate a byte array of that size...

EUVD-2009-2081

Malware in sbrugna...

EUVD-2009-0510

Malware in sbrugna...

WebSphere 7.0.0.5 的CSIv2导致的安全权限绕过漏洞

No description provided by source...

WebSphpere 6.0.2.33 CSIv2 存在未公开的安全漏洞

No description provided by source...

IBM WebSphere Application Server 7.0 < Fix Pack 5

IBM WebSphere Application Server 7.0 before Fix Pack 5 appears to be running on the remote host. As such, it is reportedly affected by multiple vulnerabilities : - Non-standard HTTP methods are allowed. PK73246 - If the admin console is directly accessed from HTTP, the console fails to redirect t...

IBM WebSphere Application Server 7.0 < Fix Pack 5 Multiple Vulnerabilities

Binary data 5142.prm...

Authentication flaw

The Security component in IBM WebSphere Application Server WAS 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5 does not properly handle use of Identity Assertion with CSIv2 Security, which allows remote attackers to bypass intended CSIv2 access restrictions via vectors involving Enterprise JavaBeans E...

CVE-2009-2085

The Security component in IBM WebSphere Application Server WAS 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5 does not properly handle use of Identity Assertion with CSIv2 Security, which allows remote attackers to bypass intended CSIv2 access restrictions via vectors involving Enterprise JavaBeans E...