This vulnerability (CVE-2026-12359) involves improper authentication (CWE-287) in IBM Security Verify Access and related products due to inconsistent HTTP request interpretation by a reverse proxy. This flaw could allow a remote attacker to bypass authentication controls and gain access to sensitive information. The CVSS 3.1 base score is 8.1, indicating high severity, with network attack vector, high complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. Affected versions explicitly include IBM Security Verify Access 10.0 and related 11.x versions as stated. No vendor advisory or patch information is currently available, and no known exploits are reported in the wild.

Successful exploitation could lead to unauthorized remote access to sensitive information due to improper authentication. The vulnerability impacts confidentiality, integrity, and availability of the affected systems, potentially allowing attackers to bypass security controls without privileges or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, monitor vendor communications for updates. No specific mitigations or workarounds are provided in the available data.