CVE-2026-8640

The IBM Security Verify Directory Web Application is vulnerable to Cross-Site Request Forgery (CSRF) attacks because it fails to set the SameSite attribute on session cookies. This flaw allows an attacker to induce authenticated users' browsers to transmit unauthorized requests to the application...