EUVD-2026-78893

IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources...

EUVD-2026-78892

IBM Security Verify Identity Access reverse proxy may allow parameters to be injected in requests to third party services...

CVE-2026-11927

IBM Security Verify Identity Access reverse proxy is vulnerable to parameter injection in requests to third-party services (CWE-74), where improper neutralization of special elements allows an unauthenticated network attacker to inject parameters. The CVSS 3.1 score is 6.5 (AV:N/AC:H/PR:N/UI:N/S:...

EUVD-2026-78890

IBM Verify Identity Access is vulnerable to a buffer overflow attack...

CVE-2026-11928

IBM Verify Identity Access and IBM Security Verify Access are vulnerable to a buffer overflow that can be exploited over the network without authentication or user interaction. The CNA-assigned CVSS 3.1 score is 9.8 (Critical) , with high impact on confidentiality, integrity, and availability. CI...

EUVD-2026-78888

IBM Security Verify Identity Access Reverse Proxy in certain configurations may provide weaker than expected cryptographic validation of user supplied data...

CVE-2026-11929

IBM Security Verify Identity Access Reverse Proxy (also listed as affected: IBM Security Verify Access ) in certain configurations may provide weaker than expected cryptographic validation of user-supplied data. This results in a CVSS 3.1 score of 7.5 (HIGH) with a high confidentiality impact and...

EUVD-2026-78885

IBM Verify Identity Access could allow an administrator to execute additional commands they are not entitled to due to improper validation of user supplied input...

CVE-2026-11934

IBM Verify Identity Access (and IBM Security Verify Access) is vulnerable to CWE-285 Improper Authorization : an administrator can execute additional commands they are not entitled to due to improper validation of user-supplied input. The flaw is rated CVSS 7.2 (HIGH) with full confidentiality, i...

CVE-2026-12101

IBM Verify Identity Access and IBM Security Verify Access are affected by an improper validation of user-supplied requests vulnerability. An administrator with existing access could leverage this flaw to execute additional commands they are not entitled to , effectively escalating their privilege...

EUVD-2026-78884

IBM Verify Identity Access could allow an administrator to execute additional commands they are not entitled to due to improper validation of user supplied requests...

EUVD-2026-78876

IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources...

CVE-2026-12358

IBM Verify Identity Access and IBM Security Verify Access are vulnerable to a denial of service caused by insufficient validation of incoming request resources (CWE-674, Uncontrolled Recursion). A remote, unauthenticated attacker can trigger the flaw over the network with low complexity, resultin...

CVE-2026-13277

IBM Verify Identity Access could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web si...

CVE-2026-13260

IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources...

CVE-2026-13272

IBM Verify Identity Access is missing origin validation which could allow a remote attacker to perform operations as the victim and potentially launch further attacks against the systems...

CVE-2026-13276

IBM Verify Identity Access 11.0.0 through 11.0.3 Interim Fix 001 and IBM Security Verify Access 10.0.0 through 10.0.9.2 Interim Fix 001 and IBM Verify Identity Access Container 11.0.0 through 11.0.3 Interim Fix 001 and IBM Security Verify Access Container 10.0.0 through 10.0.9.2 Interim Fix 001...

CVE-2026-13260 Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access

IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources...

EUVD-2026-78080

IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources...

CVE-2026-13260

IBM Verify Identity Access and IBM Security Verify Access are affected by a remote denial of service vulnerability caused by insufficient validation of incoming request resources . A remote, unauthenticated attacker over the network with low complexity can trigger the DoS, as reflected in the CVS...