CVE-2026-78399
published 2026-10-08CVE-2026-78399: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an authenticated user to cause a denial of…
PriorityP433medium6.5CVSS 3.1
AVNACLPRLUINSUCNINAH
EPSS
0.27%
18.3th percentile
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an authenticated user to cause a denial of service using a specially crafted HTTP query due to improper allocation of system resources
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | security_verify_access | 10.0 – 10.0.9.2 | — |
| ibm | security_verify_access | >= 10.0.0 < 10.0.9.3 | 10.0.9.3 |
| ibm | security_verify_access_container | 10.0 – 10.0.9.2 | — |
| ibm | security_verify_access_container | 10.0.0.0 – 10.0.9.2 | — |
| ibm | verify_identity_access | >= 11.0 < 11.0.3.1 | 11.0.3.1 |
| ibm | verify_identity_access | 11.0 – 11.0.3 | — |
| ibm | verify_identity_access_container | 11.0 – 11.0.3 | — |
| ibm | verify_identity_access_container | 11.0.0.0 – 11.0.3.0 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
IBM Security Verify Access/Verify Identity Access allocation of resources
vuldb·2026-10-09·CVSS 6.5
CVE-2026-78399 [MEDIUM] IBM Security Verify Access/Verify Identity Access allocation of resources
A vulnerability classified as critical was found in IBM Security Verify Access and Verify Identity Access. This vulnerability affects unknown code. Executing a manipulation can lead to allocation of resources.
This vulnerability is registered as CVE-2026-78399. It is possible to launch the attack remotely. No exploit is available.
GHSA
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an authenticated user to cause a denial of service using a specially crafted HTTP query
ghsa_unreviewed·2026-10-08
CVE-2026-78399 [MEDIUM] CWE-770 IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an authenticated user to cause a denial of service using a specially crafted HTTP query
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an authenticated user to cause a denial of service using a specially crafted HTTP query due to improper allocation of system resources
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-10-08
Published