Skip to content
Heist/ feed
Medium

Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

Type: advisorySource: Official CVE List1 source record

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an attacker with administrative privileges and access to the local management interface to execute arbitrary code due to an unbounded write to a fixed-size stack buffer.

Announced Source revision 1
Original source ↗

CVE-2026-12109

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-12109

Security Verify Access

Source reference: /containers/cna/affected/0/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Verify Identity Access

Source reference: /containers/cna/affected/1/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Security Verify Access Container

Source reference: /containers/cna/affected/2/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Verify Identity Access Container

Source reference: /containers/cna/affected/3/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "cpes": [
      "cpe:2.3:a:ibm:security_verify_access:10.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:security_verify_access:10.0.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:security_verify_access:10.0.9.2:*:*:*:*:*:*:*"
    ],
    "vendor": "IBM",
    "product": "Security Verify Access",
    "versions": [
      {
        "status": "affected",
        "version": "10.0",
        "versionType": "semver",
        "lessThanOrEqual": "10.0.9.2"
      }
    ]
  },
  {
    "cpes": [
      "cpe:2.3:a:ibm:verify_identity_access:11.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:verify_identity_access:11.0.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:verify_identity_access:11.0.3:*:*:*:*:*:*:*"
    ],
    "vendor": "IBM",
    "product": "Verify Identity Access",
    "versions": [
      {
        "status": "affected",
        "version": "11.0",
        "versionType": "semver",
        "lessThanOrEqual": "11.0.3"
      }
    ]
  },
  {
    "cpes": [
      "cpe:2.3:a:ibm:security_verify_access_container:10.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:security_verify_access_container:10.0.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:security_verify_access_container:10.0.9.2:*:*:*:*:*:*:*"
    ],
    "vendor": "IBM",
    "product": "Security Verify Access Container",
    "versions": [
      {
        "status": "affected",
        "version": "10.0",
        "versionType": "semver",
        "lessThanOrEqual": "10.0.9.2"
      }
    ]
  },
  {
    "cpes": [
      "cpe:2.3:a:ibm:verify_identity_access_container:11.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:verify_identity_access_container:11.0.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:verify_identity_access_container:11.0.3:*:*:*:*:*:*:*"
    ],
    "vendor": "IBM",
    "product": "Verify Identity Access Container",
    "versions": [
      {
        "status": "affected",
        "version": "11.0",
        "versionType": "semver",
        "lessThanOrEqual": "11.0.3"
      }
    ]
  }
]
Related CVEs
CVE-2026-12109

Source reference: /cveMetadata/cveId

Publisher severity

medium

Source reference: /containers/cna/metrics

Event
#16619 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement