CVE-2026-11932 PUBLISHED

Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

Assigner: ibm
Reserved: 10.06.2026 Published: 12.08.2026 Updated: 12.08.2026

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 is vulnerable to a denial of service attack.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS Score: 5.3

Product Status

Vendor IBM
Product Security Verify Access
Versions
  • affected from 10.0 to 10.0.9.2 (incl.)
Vendor IBM
Product Verify Identity Access
Versions
  • affected from 11.0 to 11.0.3 (incl.)
Vendor IBM
Product Verify Identity Access Container
Versions
  • affected from 11.0 to 11.0.3 (incl.)
Vendor IBM
Product Security Verify Access Container
Versions
  • affected from 10.0 to 10.0.9.2 (incl.)

Solutions

IBM encourages customers to update their systems promptly.

Appliance:

Affected Products and Versions

Fix availability

IBM Verify Identity Access 11.0 - 11.0.3

Download IBM Verify Identity Access v11.0.3 IF1 https://www.ibm.com/support/fixcentral/swg/downloadFixes

IBM Security Verify Access 10.0.0 - 10.0.9.2

Download IBM Security Verify Access v10.0.9.2 IF2 https://www.ibm.com/support/fixcentral/swg/downloadFixes

Container:

Container Download https://docs.verify.ibm.com/ibm-security-verify-access/docs/containers

References

Problem Types

  • CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop') CWE