CVE-2026-12101

Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access

cve-program · severity unknownCVSS unknownCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-12101

Published

IBM Verify Identity Access could allow an administrator to execute additional commands they are not entitled to due to improper validation of user supplied requests.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-12101

Published

Verify Identity Access

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "IBM",
                    "product": "Verify Identity Access",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "11.0.0",
                            "lessThanOrEqual": "11.0.3 Interim Fix 001",
                            "versionType": "semver"
                        }
                    ],
                    "cpes": [
                        "cpe:2.3:a:ibm:verify_identity_access:11.0.0:*:*:*:*:*:*:*",
                        "cpe:2.3:a:ibm:verify_identity_access:11.0.3:interim_fix_001:*:*:*:*:*:*"
                    ]
                }

Security Verify Access

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "IBM",
                    "product": "Security Verify Access",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "10.0.0",
                            "lessThanOrEqual": "10.0.9.2 Interim Fix 001",
                            "versionType": "semver"
                        }
                    ],
                    "cpes": [
                        "cpe:2.3:a:ibm:security_verify_access:10.0.0:*:*:*:*:*:*:*",
                        "cpe:2.3:a:ibm:security_verify_access:10.0.9.2:interim_fix_001:*:*:*:*:*:*"
                    ]
                }

Verify Identity Access Container

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "IBM",
                    "product": "Verify Identity Access Container",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "11.0.0",
                            "lessThanOrEqual": "11.0.3 Interim Fix 001",
                            "versionType": "semver"
                        }
                    ],
                    "cpes": [
                        "cpe:2.3:a:ibm:verify_identity_access_container:11.0.0:*:*:*:*:*:*:*",
                        "cpe:2.3:a:ibm:verify_identity_access_container:11.0.3:interim_fix_001:*:*:*:*:*:*"
                    ]
                }

Security Verify Access Container

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "IBM",
                    "product": "Security Verify Access Container",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "10.0.0",
                            "lessThanOrEqual": "10.0.9.2 Interim Fix 001",
                            "versionType": "semver"
                        }
                    ],
                    "cpes": [
                        "cpe:2.3:a:ibm:security_verify_access_container:10.0.0:*:*:*:*:*:*:*",
                        "cpe:2.3:a:ibm:security_verify_access_container:10.0.9.2:interim_fix_001:*:*:*:*:*:*"
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON