Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| IBM | Verify Identity Access | affected |
|
||||||
| IBM | Security Verify Access | affected |
|
||||||
| IBM | Verify Identity Access Container | affected |
|
||||||
| IBM | Security Verify Access Container | affected |
|
No data.
No data.
No data available yet.
Vendor Solution
IBM encourages customers to update their systems promptly. Appliance Affected Products Fix availability IBM Verify Identity Access Download IBM Verify Identity Access v11.0.3 IF2 IBM Security Verify Access Download IBM Security Verify Access v10.0.9.2 IF2 Container Container Download
Tracking
Sign in to view the affected projects.
No advisories yet.
| Link | Providers |
|---|---|
| https://www.ibm.com/support/pages/node/7286188 |
|
Mon, 14 Sep 2026 21:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | IBM Verify Identity Access is missing origin validation which could allow a remote attacker to perform operations as the victim and potentially launch further attacks against the systems. | |
| Title | Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access | |
| First Time appeared |
Ibm
Ibm security Verify Access Ibm security Verify Access Container Ibm verify Identity Access Ibm verify Identity Access Container |
|
| Weaknesses | CWE-1385 | |
| CPEs | cpe:2.3:a:ibm:security_verify_access:10.0.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:security_verify_access:10.0.9.2:interim_fix_001:*:*:*:*:*:* cpe:2.3:a:ibm:security_verify_access_container:10.0.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:security_verify_access_container:10.0.9.2:interim_fix_001:*:*:*:*:*:* cpe:2.3:a:ibm:verify_identity_access:11.0.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:verify_identity_access:11.0.3:interim_fix_001:*:*:*:*:*:* cpe:2.3:a:ibm:verify_identity_access_container:11.0.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:verify_identity_access_container:11.0.3:interim_fix_001:*:*:*:*:*:* |
|
| Vendors & Products |
Ibm
Ibm security Verify Access Ibm security Verify Access Container Ibm verify Identity Access Ibm verify Identity Access Container |
|
| References |
|
MITRE
Status: PUBLISHED
Assigner: ibm
Published:
Updated: 2026-09-14T20:15:05.143Z
Reserved: 2026-06-24T21:27:48.597Z
Link: CVE-2026-13272
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-09-14T21:17:01.273
Modified: 2026-09-14T21:17:01.273
Link: CVE-2026-13272
Redhat
No data.
OpenCVE Enrichment
No data.
-
CWE-1385
Missing Origin Validation in WebSockets