Threat Intelligence Database

CVE-2026-11930 is an improper authorization vulnerability in IBM Security Verify Access and IBM Verify Identity Access. Versions 10.0 through 10.0.9.2 and 11.0 through 11.0.3 may fail to enforce authorization correctly for some web servers, potentially allowing unauthorized actions. The vulnerability has a medium severity rating with a CVSS score of 5.9.

CVE-2026-11939 is a low-severity vulnerability in IBM Security Verify Access and IBM Verify Identity Access that may allow audit log forgery due to improper neutralization of argument delimiters (CWE-88). It affects versions 10.0 through 10.0.9.2 and 11.0 through 11.0.3. The vulnerability does not impact confidentiality or availability but may allow limited integrity impact on audit logs. No known exploits are reported, and no patch information is provided.

CVE-2026-16916 is a critical vulnerability in IBM Security Verify Access and IBM Verify Identity Access versions 10.0 through 10.0.9.2 and 11.0 through 11.0.3. It involves a protection mechanism failure that could allow a remote authenticated attacker to execute arbitrary code. The vulnerability has a high CVSS score of 9.1, indicating severe impact on confidentiality, integrity, and availability. No explicit patch information is provided in the input data.

CVE-2026-19498 is a vulnerability in IBM Security Verify Access and IBM Verify Identity Access versions 10.0 through 10.0.9.2 and 11.0 through 11.0.3. It involves uncontrolled recursion that could be triggered remotely to cause a denial of service (DoS). The vulnerability does not impact confidentiality or integrity but affects availability. The CVSS 3.1 base score is 5.9, indicating medium severity.

CVE-2026-19493 is a path traversal vulnerability in IBM Security Verify Access and IBM Verify Identity Access versions 10.0 through 10.0.9.2 and 11.0 through 11.0.3. This flaw allows a remote attacker to perform arbitrary file writes by exploiting improper limitation of pathnames to restricted directories.

CVE-2026-12091 is a low severity vulnerability in IBM Security Verify Access and IBM Verify Identity Access that allows a remote attacker to cause a denial of service via a heap-based out-of-bounds read. The affected versions are 10.0 through 10.0.9.2 and 11.0 through 11.0.3. The vulnerability involves a specially crafted request triggering a limited out-of-bounds memory read.

CVE-2026-12109 is an out-of-bounds write vulnerability in IBM Security Verify Access and IBM Verify Identity Access. It affects versions 10.0 through 10.0.9.2 and 11.0 through 11.0.3. An attacker with administrative privileges and local management interface access could exploit this flaw to execute arbitrary code due to an unbounded write to a fixed-size stack buffer. The vulnerability has a medium severity with a CVSS score of 5.5.