CVE-2026-13272: Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access

Published Sep 14, 2026

Updated

IBM Verify Identity Access is missing origin validation which could allow a remote attacker to perform operations as the victim and potentially launch further attacks against the systems.

Affected Software

2 affected components

IBM IBM Verify Identity Access

IBM IBM Security Verify Access

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade IBM Verify Identity Access to a version that resolves this vulnerability.
Fixed in 11.0.3 IF2
Upgrade
Upgrade IBM Security Verify Access to a version that resolves this vulnerability.
Fixed in 10.0.9.2 IF2

Event History

Sep 14, 2026

CVE Published

via MITRE·08:13 PM

Data Sourced

via MITRE·08:13 PM

RemedyDescriptionWeakness

Frequently Asked Questions

Does exploitation require local access to the affected system?

No. The issue could be exploited by a remote attacker.