by Kastro
Paper/Archive/CVE-2026-1346

CVE-2026-1346

IBM Verify Identity Access Container — Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

EPSS 0.2%CVSS 9.3
critical.is priorityof 100
31
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 13.6.136 × 202.7No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 could allow a locally authenticated user to escalate their privileges to root due to execution with unnecessary privileges than required.

Affected

ProductAffectedFixed inSource
Verify Identity Access Container11.0 – 11.0.2–CNA
Security Verify Access Container10.0 – 10.0.9.1–CNA
Verify Identity Access11.0 – 11.0.2–CNA
Security Verify Access10.0 – 10.0.9.1–CNA

Scores by source

ibm (CNA)9.3CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

patchibm.com/support/pages/node/7268253