Threat Intelligence Database

CVE-2026-11888 is a medium severity vulnerability in IBM Security Verify Access and IBM Verify Identity Access that allows information disclosure due to improper control of code generation (code injection). It affects versions 10.0 through 10.0.9.2 and 11.0 through 11.0.3. The vulnerability has a CVSS 3.1 score of 6.4, indicating a moderate impact with low privileges required and high impact on availability. No known exploits are reported in the wild, and no patch information is provided.

CVE-2026-16823 is a critical improper authentication vulnerability in IBM Security Verify Access and IBM Verify Identity Access. It affects versions 10.0 through 10.0.9.2 and 11.0 through 11.0.3. This flaw could allow a remote attacker to bypass security restrictions without authentication, potentially leading to full confidentiality and integrity compromise. The vulnerability has a CVSS score of 9.1, indicating high severity. No known exploits are reported in the wild, and no official patch or remediation details are provided in the available data.

CVE-2026-16830 is an SQL injection vulnerability in IBM Security Verify Access versions 10.0 through 10.0.9.2 and IBM Verify Identity Access versions 11.0 through 11.0.3. This flaw allows a remote authenticated attacker to modify data and cause a denial of service. The vulnerability requires authentication and does not impact confidentiality but affects integrity and availability. The CVSS v3.1 base score is 5.4, indicating a medium severity level.

IBM Security Verify Access versions 10.0 through 10.0.9.2 and IBM Verify Identity Access versions 11.0 through 11.0.3 contain a cross-site scripting (XSS) vulnerability. This flaw allows an unauthenticated attacker to inject arbitrary JavaScript into the web user interface, potentially altering its intended behavior. Exploitation could lead to disclosure of credentials within a trusted session. The vulnerability has a high severity rating with a CVSS score of 8.2.

CVE-2026-18740 is a high severity vulnerability in IBM Security Verify Access and IBM Verify Identity Access that allows a remote authenticated attacker to perform unauthorized actions via argument injection. The affected versions include 10.0 through 10.0.9.2 and 11.0 through 11.0.3. This vulnerability stems from improper neutralization of argument delimiters in a command, classified as CWE-88. The CVSS score is 8.8, indicating a significant risk to confidentiality, integrity, and availability.

CVE-2026-19491 is a critical improper authentication vulnerability in IBM Security Verify Access versions 10.0 through 10.0.9.2 and IBM Verify Identity Access versions 11.0 through 11.0.3. This flaw could allow a remote attacker to bypass authentication without any privileges or user interaction, potentially leading to full compromise of confidentiality and integrity. The vulnerability has a CVSS 3.1 score of 9.1, indicating high severity. No known exploits are reported in the wild. There is no explicit vendor advisory or patch information provided in the input data.

CVE-2026-19482 is a high-severity vulnerability in IBM Security Verify Access and IBM Verify Identity Access that affects versions 10.0 through 10.0.9.2 and 11.0 through 11.0.3. It involves improper neutralization of command arguments, allowing a remote authenticated attacker to execute arbitrary commands on the affected systems.

CVE-2026-78399 is a vulnerability in IBM Security Verify Access and IBM Verify Identity Access versions 10.0 through 10.0.9.2 and 11.0 through 11.0.3. It allows an authenticated user to cause a denial of service by exploiting improper allocation of system resources via a specially crafted HTTP query. The vulnerability does not impact confidentiality or integrity but affects availability.

CVE-2026-78406 is a critical vulnerability in IBM Security Verify Access and IBM Verify Identity Access that affects versions 10.0 through 10.0.9.2 and 11.0 through 11.0.3. It involves deserialization of untrusted data, which could allow a remote unauthenticated attacker to execute arbitrary code on the affected systems.

CVE-2026-19878 is a medium severity vulnerability in IBM Security Verify Access and IBM Verify Identity Access. It affects versions 10.0 through 10.0.9.2 and 11.0 through 11.0.3. The flaw allows a remote authenticated attacker to bypass additional authentication workflow steps, potentially reducing the effectiveness of multi-factor authentication or other security controls.