CVE-2026-19494: Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Security Verify Accessto a version that resolves this vulnerability.Fixed in 10.0.9.3 - Upgrade
Upgrade
IBM Verify Identity Accessto a version that resolves this vulnerability.Fixed in 11.0.3.1
Event History
Frequently Asked Questions
Who can exploit this issue?
A remote attacker must be authenticated, meaning they need valid access to an affected IBM Security Verify Access or IBM Verify Identity Access deployment before attempting to exploit it.
Which deployments are affected?
Affected versions are IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3. The provided information does not identify configuration-specific prerequisites or exclusions.
What is the potential impact of successful exploitation?
An authenticated remote attacker could bypass security restrictions. The vulnerability is rated high severity with high confidentiality and integrity impact, while availability impact is rated as none.