CVE-2026-11926: Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access
Published Sep 15, 2026
·Updated
IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources.
Affected Software
2 affected components
IBM Verify Identity Access
IBM IBM Security Verify Access
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Security Verify Accessto a version that resolves this vulnerability.Fixed in v10.0.9.2 IF2 - Upgrade
Upgrade
IBM Verify Identity Accessto a version that resolves this vulnerability.Fixed in v11.0.3 IF2
Event History
Sep 15, 2026
CVE Published
via MITRE·05:21 PM
Data Sourced
via MITRE·05:21 PM
RemedyDescriptionWeakness
Frequently Asked Questions
1
Does exploiting this issue require local access to the affected system?
No. The issue is described as remotely exploitable through insufficient validation of incoming request resources.