Threats affecting pkg:maven/com.ibm/verify-identity-access-container

CVE-2026-2475 is an open redirect vulnerability in IBM Verify Identity Access Container versions 11.0 through 11.0.2 and IBM Security Verify Access Container versions 10.0 through 10.0.9.1. This flaw allows a remote attacker to craft a malicious URL that redirects users to arbitrary websites, potentially facilitating phishing attacks. The vulnerability requires user interaction and has a low attack complexity.