by Kastro
Paper/Archive/CVE-2026-17616

CVE-2026-17616

IBM Security Verify Access — Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

EPSS 0.4%CVSS 9.8
critical.is priorityof 100
36
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 33.8.338 × 206.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 Reverse Proxy in certain configurations may provide weaker than expected cryptographic validation of user supplied data.

Affected

ProductAffectedFixed inSource
Security Verify Access10.0 – 10.0.9.2–CNA
Verify Identity Access11.0 – 11.0.3–CNA
Verify Identity Access Container11.0 – 11.0.3–CNA
Security Verify Access Container10.0 – 10.0.9.2–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
ibm (CNA)6.8CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

patchibm.com/support/pages/node/7283079