CVE-2026-12359

Summary

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 could allow a remote attacker to access sensitive information due to an inconsistent interpretation of an HTTP request by a reverse proxy.

Affected Software

VendorProductVersion RangeStatus
IBMSecurity Verify Access10.0 <= 10.0.9.2affected
IBMVerify Identity Access11.0 <= 11.0.3affected
IBMVerify Identity Access Container11.0 <= 11.0.3affected
IBMSecurity Verify Access Container10.0 <= 10.0.9.2affected

Weaknesses

  • CWE-287: CWE-287 Improper Authentication

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References