CVE-2026-11921 identifies a vulnerability in IBM Verify Identity Access where containerized deployments may not properly apply management password change operations. This results in credentials being insufficiently protected, potentially exposing sensitive authentication information. The affected versions are exactly 10.0.0 and 11.0.0. There is no available CVSS score or detailed vendor advisory indicating patch availability or mitigation steps.

The vulnerability could allow credentials used for management operations to remain unchanged or improperly secured, increasing the risk of unauthorized access if these credentials are compromised. However, no active exploitation has been reported, and the exact impact depends on the deployment and usage of the affected containers.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix or guidance is provided by IBM, administrators should verify that management password changes are correctly applied and consider additional credential management controls.