CVE-2026-19491 PUBLISHED

Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

Assigner: ibm
Reserved: 10.08.2026 Published: 08.10.2026 Updated: 08.10.2026

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to bypass authentication due to improper authentication.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS Score: 9.1

Product Status

Vendor IBM
Product Security Verify Access
Versions
  • affected from 10.0 to 10.0.9.2 (incl.)
Vendor IBM
Product Verify Identity Access
Versions
  • affected from 11.0 to 11.0.3 (incl.)
Vendor IBM
Product Security Verify Access Container
Versions
  • affected from 10.0 to 10.0.9.2 (incl.)
Vendor IBM
Product Verify Identity Access Container
Versions
  • affected from 11.0 to 11.0.3 (incl.)

Solutions

IBM encourages customers to update their systems promptly.

Appliance: Affected Products Fix availability IBM Verify Identity Access Download IBM Verify Identity Access v11.0.3.1 IBM Security Verify Access Download IBM Security Verify Access v10.0.9.3

Container: Container Download

References

Problem Types

  • CWE-287 Improper Authentication CWE