CVE-2026-13260: Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access
Published Sep 14, 2026
·Updated
IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources.
Affected Software
2 affected components
IBM Verify Identity Access
IBM IBM Security Verify Access
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Security Verify Accessto a version that resolves this vulnerability.Fixed in v10.0.9.2 IF2 - Upgrade
Upgrade
IBM Verify Identity Accessto a version that resolves this vulnerability.Fixed in v11.0.3 IF2
Event History
Sep 14, 2026
CVE Published
via MITRE·08:17 PM
Data Sourced
via MITRE·08:17 PM
RemedyDescriptionWeakness
Frequently Asked Questions
1
What level of access would an attacker need to exploit this issue?
The issue could be exploited by a remote attacker. The available information does not state that authentication or prior access is required.