CVE-2026-11904

MEDIUM

Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

Title source: cna

Description

IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 and IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.

References (1)

Core 1

Core References

Vendor Advisory vendor-advisory patch

https://www.ibm.com/support/pages/node/7279510

Scores

CVSS v3 5.3

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

Details

CWE

CWE-209

Status published

Products (4)

IBM/Security Verify Access 10.0 - 10.0.9.1

IBM/Security Verify Access Container 10.0 - 10.0.9.1

IBM/Verify Identity Access 11.0 - 11.0.2

IBM/Verify Identity Access Container 11.0 - 11.0.2

Published Jul 30, 2026

Tracked Since Jul 30, 2026