CVE-2026-8860

The IBM Security Verify Directory Web Application is vulnerable to credential exposure because it accepts GET requests for authentication. This allows credentials to be transmitted as URL parameters , which may be captured in browser history and server logs. The affected products are IBM Security...