CVE-2026-11930 is an authorization vulnerability in IBM Security Verify Access and IBM Verify Identity Access. Versions 10.0 through 10.0.9.2 and 11.0 through 11.0.3 may not correctly enforce authorization for some web servers, potentially allowing unauthorized actions. The vulnerability has a medium severity rating and a CVSS score of 5.9.
CVE-2026-11939 is a low-severity vulnerability in IBM Security Verify Access and IBM Verify Identity Access that may allow audit log forgery due to improper neutralization of argument delimiters (CWE-88). It affects versions 10.0 through 10.0.9.2 and 11.0 through 11.0.3. The vulnerability does not impact confidentiality or availability but can affect the integrity of audit logs.
CVE-2026-16823 is a critical improper authentication vulnerability in IBM Security Verify Access and IBM Verify Identity Access. Versions 10.0 through 10.0.9.2 and 11.0 through 11.0.3 are affected. This flaw could allow a remote attacker to bypass security restrictions without authentication, potentially leading to full confidentiality and integrity compromise. No known exploits are reported in the wild. No patch or remediation details are provided in the available data.
CVE-2026-16830 is an SQL injection vulnerability in IBM Security Verify Access and IBM Verify Identity Access versions 10.0 through 10.0.9.2 and 11.0 through 11.0.3. A remote authenticated attacker could exploit this flaw to modify data and cause a denial of service. The vulnerability has a medium severity with a CVSS score of 5.4.
CVE-2026-16916 is a critical vulnerability in IBM Security Verify Access versions 10.0 through 10.0.9.2 and IBM Verify Identity Access versions 11.0 through 11.0.3. It involves a protection mechanism failure that could allow a remote authenticated attacker to execute arbitrary code. The vulnerability has a high CVSS score of 9.1, indicating severe impact on confidentiality, integrity, and availability. No patch or vendor advisory information is provided regarding remediation status.
IBM Security Verify Access versions 10.0 through 10.0.9.2 and IBM Verify Identity Access versions 11.0 through 11.0.3 contain a cross-site scripting (XSS) vulnerability. This flaw allows an unauthenticated attacker to inject arbitrary JavaScript into the web user interface, potentially altering functionality and leading to credential disclosure within a trusted session. The vulnerability has a high severity rating with a CVSS score of 8.2.
CVE-2026-18740 is a high-severity vulnerability in IBM Security Verify Access and IBM Verify Identity Access that allows a remote authenticated attacker to perform unauthorized actions via argument injection. It affects versions 10.0 through 10.0.9.2 and 11.0 through 11.0.3. The vulnerability stems from improper neutralization of argument delimiters in a command, classified as CWE-88.
CVE-2026-19491 is a critical improper authentication vulnerability in IBM Security Verify Access and IBM Verify Identity Access. Versions 10.0 through 10.0.9.2 and 11.0 through 11.0.3 are affected. This flaw allows a remote attacker to bypass authentication without any privileges or user interaction. The vulnerability has a CVSS score of 9.1, indicating high impact on confidentiality and integrity. No patch information is provided in the available data.
CVE-2026-19494 is a high-severity vulnerability in IBM Security Verify Access and IBM Verify Identity Access that allows a remote authenticated attacker to bypass security restrictions due to improper authentication. It affects versions 10.0 through 10.0.9.2 and 11.0 through 11.0.3. The vulnerability has a CVSS 3.1 score of 8.1, indicating a significant impact on confidentiality and integrity without requiring user interaction. No official patch or remediation details are provided in the available data.
CVE-2026-19498 is a medium severity vulnerability in IBM Security Verify Access and IBM Verify Identity Access versions 10.0 through 10.0.9.2 and 11.0 through 11.0.3. It involves uncontrolled recursion that could be triggered remotely, leading to a denial of service condition. No confidentiality or integrity impacts are indicated. The vulnerability requires high attack complexity and no privileges or user interaction. No known exploits are reported, and no patch information is provided.
CVE-2026-19493 is a path traversal vulnerability in IBM Security Verify Access and IBM Verify Identity Access versions 10.0 through 10.0.9.2 and 11.0 through 11.0.3. This flaw allows a remote attacker to perform arbitrary file write operations on the affected systems. The vulnerability has a high severity rating with a CVSS score of 7.5, indicating significant risk if exploited. No information about available patches or vendor advisories is provided.
CVE-2026-19482 is a high-severity vulnerability in IBM Security Verify Access and IBM Verify Identity Access versions 10.0 through 10.0.9.2 and 11.0 through 11.0.3. It allows a remote authenticated attacker to execute arbitrary commands due to improper neutralization of command arguments (CWE-88). The vulnerability has a CVSS 3.1 score of 8.8, indicating high impact on confidentiality, integrity, and availability.
IBM Security Verify Access versions 10.0 through 10.0.9.2 and IBM Verify Identity Access versions 11.0 through 11.0.3 contain a vulnerability where an authenticated user can cause a denial of service by exploiting improper allocation of system resources via a specially crafted HTTP query. This vulnerability does not impact confidentiality or integrity but can disrupt availability.
IBM Security Verify Access versions 10.0 through 10.0.9.2 and IBM Verify Identity Access versions 11.0 through 11.0.3 are affected by a cross-site request forgery (CSRF) vulnerability. This flaw could allow an attacker to trick a user into executing unauthorized actions on a trusted website. The vulnerability has a medium severity rating with a CVSS score of 4.3. No known exploits are reported in the wild, and no official patch information is provided in the available data.
CVE-2026-78401 is a critical vulnerability in IBM Security Verify Access and IBM Verify Identity Access that allows remote unauthenticated attackers to execute arbitrary code via deserialization of untrusted data. It affects versions 10.0 through 10.0.9.2 and 11.0 through 11.0.3. The vulnerability has a CVSS score of 9.8, indicating high impact on confidentiality, integrity, and availability.
CVE-2026-78406 is a critical vulnerability in IBM Security Verify Access and IBM Verify Identity Access that allows remote unauthenticated attackers to execute arbitrary code via deserialization of untrusted data. It affects versions 10.0 through 10.0.9.2 and 11.0 through 11.0.3. The vulnerability has a CVSS score of 9.8, indicating high severity with network attack vector, no privileges required, and no user interaction needed.
CVE-2026-19878 is a medium severity vulnerability in IBM Security Verify Access and IBM Verify Identity Access that allows a remote authenticated attacker to bypass additional authentication workflow steps. This affects versions 10.0 through 10.0.9.2 and 11.0 through 11.0.3. The vulnerability relates to improper enforcement of behavioral workflow, potentially reducing the effectiveness of multi-step authentication processes.
CVE-2026-12091 is a low severity vulnerability in IBM Security Verify Access and IBM Verify Identity Access. It involves a heap-based out-of-bounds read that could be triggered remotely by sending a specially crafted request. This flaw may cause a denial of service but does not impact confidentiality or integrity. The affected versions are IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3.
IBM Security Verify Access versions 10.0 through 10.0.9.2 and IBM Verify Identity Access versions 11.0 through 11.0.3 contain a cross-site scripting (XSS) vulnerability in the local management interface under certain configurations. This vulnerability allows an authenticated user to inject arbitrary JavaScript code into the web user interface, potentially altering functionality and leading to credential disclosure within a trusted session. The vulnerability has a medium severity with a CVSS score of 4.9.
CVE-2026-12109 is an out-of-bounds write vulnerability in IBM Security Verify Access and IBM Verify Identity Access. It affects versions 10.0 through 10.0.9.2 and 11.0 through 11.0.3. An attacker with administrative privileges and local management interface access could exploit this to execute arbitrary code. The vulnerability arises from an unbounded write to a fixed-size stack buffer.