CVE-2026-12358: Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access

Published Sep 15, 2026

Updated

IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources.

Affected Software

1 affected component

IBM IBM Verify Identity Access

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade IBM Security Verify Access to a version that resolves this vulnerability.
Fixed in v10.0.9.2 IF2
Upgrade
Upgrade IBM Verify Identity Access to a version that resolves this vulnerability.
Fixed in v11.0.3 IF2

Event History

Sep 15, 2026

CVE Published

via MITRE·05:12 PM

Data Sourced

via MITRE·05:12 PM

RemedyDescriptionWeakness

Frequently Asked Questions

What does an attacker need to exploit this issue?

The issue can be exploited remotely by sending incoming requests with inadequately validated resources. The provided information does not state that authentication or prior access is required.

What is the likely impact of successful exploitation?

Successful exploitation could cause a denial of service in IBM Verify Identity Access.