CVE-2026-11929: Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access

Published Sep 15, 2026

Updated

IBM Security Verify Identity Access Reverse Proxy in certain configurations may provide weaker than expected cryptographic validation of user supplied data.

Affected Software

1 affected component

IBM IBM Security Verify Identity Access Reverse Proxy

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade IBM Security Verify Access to a version that resolves this vulnerability.
Fixed in v10.0.9.2 IF2
Upgrade
Upgrade IBM Verify Identity Access to a version that resolves this vulnerability.
Fixed in v11.0.3 IF2

Event History

Sep 15, 2026

CVE Published

via MITRE·05:18 PM

Data Sourced

via MITRE·05:18 PM

RemedyDescription

Frequently Asked Questions

Which deployments are affected?

The issue affects IBM Security Verify Identity Access Reverse Proxy deployments only in certain configurations. The provided information does not identify the specific configurations.

What condition is associated with the weakness?

The weakness concerns cryptographic validation of user-supplied data by the Reverse Proxy. In affected configurations, that validation may be weaker than expected.