Vulnerability details
CVE-2026-11929
IBM Security Verify AccessIBM Security Verify Access ContainerIBM Verify Identity AccessIBM Verify Identity Access Container
Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access
CVSS 3.1
7.5High
Official description
IBM Security Verify Identity Access Reverse Proxy in certain configurations may provide weaker than expected cryptographic validation of user supplied data.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 7.5High | 3.1 | CISA ADP / Vulnrichment (CISA-ADP) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| IBM | Security Verify Access | 10.0.0 ≤ v ≤ 10.0.9.2 Interim Fix 001 | CVEProject cvelistV5 (CNA) |
| IBM | Security Verify Access Container | 10.0.0 ≤ v ≤ 10.0.9.2 Interim Fix 001 | CVEProject cvelistV5 (CNA) |
| IBM | Verify Identity Access | 11.0.0 ≤ v ≤ 11.0.3 Interim Fix 001 | CVEProject cvelistV5 (CNA) |
| IBM | Verify Identity Access Container | 11.0.0 ≤ v ≤ 11.0.3 Interim Fix 001 | CVEProject cvelistV5 (CNA) |
References and advisories
1- https://www.ibm.com/support/pages/node/7286188 vendor-advisorypatch
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2026-09-15
- Last updated
- 2026-09-15
- State
- Published
- Assigner (CNA)
- ibm
Exploit prediction (EPSS)
0.25%
Probability of exploitation in 30 days
17.5%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- Yes
- Exploitation
- None
- Technical impact
- Partial
Weaknesses (CWE)
- CWE-327Use of a Broken or Risky Cryptographic Algorithm