Skip to content
OpenAdvisories
Medium · 5.4 CVE-2026-13272 EUVD-2026-78074GHSA-7prr-jwvh-xvm3

Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access

Published Sep 14, 2026 · Updated Sep 20, 2026 · Assigned by ibm

Vendor: IBM Product: Security Verify Access Product: Security Verify Access Container Product: Verify Identity Access Product: Verify Identity Access Container

Description

IBM Verify Identity Access is missing origin validation which could allow a remote attacker to perform operations as the victim and potentially launch further attacks against the systems.

Affected products

VendorProductAffectedFixed
IBM Verify Identity Access 11.0.0 – ≤ 11.0.3 Interim Fix 001 —
IBM Security Verify Access 10.0.0 – ≤ 10.0.9.2 Interim Fix 001 —
IBM Verify Identity Access Container 11.0.0 – ≤ 11.0.3 Interim Fix 001 —
IBM Security Verify Access Container 10.0.0 – ≤ 10.0.9.2 Interim Fix 001 —

References