CVE-2026-19494
published 2026-10-08CVE-2026-19494: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to bypass…
PriorityP342medium6.5CVSS 3.1
AVNACLPRLUINSUCNIHAN
EPSS
0.29%
20.0th percentile
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | security_verify_access | 10.0 – 10.0.9.2 | — |
| ibm | security_verify_access | >= 10.0.0 < 10.0.9.3 | 10.0.9.3 |
| ibm | security_verify_access_container | 10.0 – 10.0.9.2 | — |
| ibm | security_verify_access_container | 10.0.0.0 – 10.0.9.2 | — |
| ibm | verify_identity_access | >= 11.0 < 11.0.3.1 | 11.0.3.1 |
| ibm | verify_identity_access | 11.0 – 11.0.3 | — |
| ibm | verify_identity_access_container | 11.0 – 11.0.3 | — |
| ibm | verify_identity_access_container | 11.0.0.0 – 11.0.3.0 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
IBM Security Verify Access/Verify Identity Access improper authentication
vuldb·2026-10-09·CVSS 8.1
CVE-2026-19494 [HIGH] IBM Security Verify Access/Verify Identity Access improper authentication
A vulnerability described as critical has been identified in IBM Security Verify Access and Verify Identity Access. Affected by this issue is some unknown functionality. Such manipulation leads to improper authentication.
This vulnerability is listed as CVE-2026-19494. The attack may be performed from remote. There is no available exploit.
GHSA
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to bypass security restrictions due to improper authenti
ghsa_unreviewed·2026-10-08
CVE-2026-19494 [HIGH] CWE-287 IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to bypass security restrictions due to improper authenti
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-10-08
Published