CVE-2026-8861

The CVE-2026-8861 entry concerns IBM Security Verify products (Identity Access and Security Verify Access). The issue arises when a detailed technical error message is returned in the browser, enabling a remote attacker to disclose sensitive information and potentially facilitate further attacks....

CVE-2026-1342

Summary: CVE-2026-1342 affects IBM Verify Identity Access Container 11.0–11.0.2, IBM Security Verify Access Container 10.0–10.0.9.1, IBM Verify Identity Access 11.0–11.0.2, and IBM Security Verify Access 10.0–10.0.9.1. A locally authenticated user could execute malicious scripts outside of the ap...

CVE-2026-1343

CVE-2026-1343 affects IBM Verify Identity Access Container (11.0–11.0.2), IBM Security Verify Access Container (10.0–10.0.9.1), IBM Verify Identity Access (11.0–11.0.2), and IBM Security Verify Access (10.0–10.0.9.1). The issue allows an attacker to contact internal authentication endpoints prote...

CVE-2026-1346

Technical details about CVE-2026-1346 are not publicly provided in the supplied documents. Monitor for updates from IBM/Red Hat and security feeds for affected versions, impact, and fixes.

CVE-2026-11932

IBM Security Verify Access and IBM Verify Identity Access (and their Container variants) are vulnerable to a denial-of-service attack caused by an infinite loop (CWE-835) triggered by a specially-crafted request. Affected versions are 10.0 through 10.0.9.2 and 11.0 through 11.0.3. IBM has release...

CVE-2026-17616

IBM Security Verify Access 10.0–10.0.9.2, Verify Identity Access 11.0–11.0.3, and their container variants have a Reverse Proxy flaw (CWE-310: Cryptographic Issues) that weakens cryptographic validation of user-supplied data, enabling potential spoofing and unauthorized access. NVD rates it criti...

CVE-2026-4938

CVE-2026-4938 affects IBM Verify Identity Access (11.0–11.0.2) and IBM Security Verify Access (10.0–10.0.9.1) plus their Identity Access/Verify Access Containers. The vulnerability allows an attacker with read-only privileges to perform unauthorized modifications and deployments outside their ass...

CVE-2026-1345

The CVE-2026-1345 entry affects IBM Verify Identity Access Container (11.0–11.0.2), IBM Security Verify Access Container (10.0–10.0.9.1), IBM Verify Identity Access (11.0–11.0.2), and IBM Security Verify Access (10.0–10.0.9.1). The root cause is improper validation of user-supplied input, enablin...

CVE-2026-4364

The CVE-2026-4364 entry affects IBM Verify Identity Access Container (11.0–11.0.2), IBM Security Verify Access Container (10.0–10.0.9.1), IBM Verify Identity Access (11.0–11.0.2), and IBM Security Verify Access (10.0–10.0.9.1). The root cause is that the server returns a JSON payload with the Con...

CVE-2026-5926

The CVE-2026-5926 affects IBM Verify Identity Access and IBM Security Verify Access products. Affected versions include IBM Verify Identity Access Container 11.0–11.0.2, IBM Security Verify Access Container 10.0–10.0.9.1, IBM Verify Identity Access 11.0–11.0.2, and IBM Security Verify Access 10.0...

CVE-2026-7364

CVE-2026-7364 affects IBM Verify Identity Access 11.0–11.0.2, IBM Security Verify Access 10.0–10.0.9.1, and corresponding containers. Description: an open redirect vulnerability could let a remote attacker perform phishing by sending a crafted request that redirects the victim to an arbitrary sit...

CVE-2026-2862

CVE-2026-2862 affects IBM Verify Identity Access Container (11.0–11.0.2) and IBM Security Verify Access Container (10.0–10.0.9.1), plus IBM Verify Identity Access (11.0–11.0.2) and IBM Security Verify Access (10.0–10.0.9.1). Root cause is an inconsistent interpretation of an HTTP request by a rev...

CVE-2026-4101

CVE-2026-4101 describes an authentication bypass in IBM Verify Identity Access and IBM Security Verify Access products under certain load conditions. Affected components per sources: IBM Verify Identity Access Container 11.0–11.0.2 and IBM Security Verify Access Container 10.0–10.0.9.1, as well a...

CVE-2026-1491

CVE-2026-1491 affects IBM Verify Identity Access Container (11.0–11.0.2) and IBM Security Verify Access Container (10.0–10.0.9.1), plus corresponding Identity Access products, with an information disclosure risk due to inconsistent interpretation of HTTP requests by a reverse proxy (CWE-444). The...

CVE-2026-2475

IBM Verify Identity Access Container 11.0–11.0.2 and IBM Security Verify Access Container 10.0–10.0.9.1 (and their non-container counterparts 11.0–11.0.2 and 10.0–10.0.9.1) are affected by an open redirect vulnerability that could enable a remote attacker to conduct phishing campaigns by redirect...