CVE-2026-16916 PUBLISHED

Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

Assigner: ibm
Reserved: 24.07.2026 Published: 08.10.2026 Updated: 08.10.2026

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to execute arbitrary code due to a protection mechanism failure.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS Score: 9.1

Product Status

Vendor IBM
Product Security Verify Access
Versions
  • affected from 10.0 to 10.0.9.2 (incl.)
Vendor IBM
Product Verify Identity Access
Versions
  • affected from 11.0 to 11.0.3 (incl.)
Vendor IBM
Product Security Verify Access Container
Versions
  • affected from 10.0 to 10.0.9.2 (incl.)
Vendor IBM
Product Verify Identity Access Container
Versions
  • affected from 11.0 to 11.0.3 (incl.)

Solutions

IBM encourages customers to update their systems promptly.

Appliance: Affected Products Fix availability IBM Verify Identity Access Download IBM Verify Identity Access v11.0.3.1 IBM Security Verify Access Download IBM Security Verify Access v10.0.9.3

Container: Container Download

References

Problem Types

  • CWE-693 Protection Mechanism Failure CWE