CVE-2026-12359 PUBLISHED

Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

Assigner: ibm
Reserved: 15.06.2026 Published: 12.08.2026 Updated: 13.08.2026

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 could allow a remote attacker to access sensitive information due to an inconsistent interpretation of an HTTP request by a reverse proxy.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Score: 8.1

Product Status

Vendor IBM
Product Security Verify Access
Versions
  • affected from 10.0 to 10.0.9.2 (incl.)
Vendor IBM
Product Verify Identity Access
Versions
  • affected from 11.0 to 11.0.3 (incl.)
Vendor IBM
Product Verify Identity Access Container
Versions
  • affected from 11.0 to 11.0.3 (incl.)
Vendor IBM
Product Security Verify Access Container
Versions
  • affected from 10.0 to 10.0.9.2 (incl.)

Solutions

IBM encourages customers to update their systems promptly.

Appliance:

Affected Products and Versions

Fix availability

IBM Verify Identity Access 11.0 - 11.0.3

Download IBM Verify Identity Access v11.0.3 IF1 https://www.ibm.com/support/fixcentral/swg/downloadFixes

IBM Security Verify Access 10.0.0 - 10.0.9.2

Download IBM Security Verify Access v10.0.9.2 IF2 https://www.ibm.com/support/fixcentral/swg/downloadFixes

Container:

Container Download https://docs.verify.ibm.com/ibm-security-verify-access/docs/containers

References

Problem Types

  • CWE-287 Improper Authentication CWE