CVE-2026-12109
MEDIUMCVSS 5.5Description
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an attacker with administrative privileges and access to the local management interface to execute arbitrary code due to an unbounded write to a fixed-size stack buffer.
Timeline
Published:October 8th, 2026 9:17 PM
Last modified:November 4th, 2026 8:19 PM
CVSS Scoring
CVSS v3: 5.5 (MEDIUM)
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H
Affected Software
From NVD CPE configuration data
Vendors
ibm
Products
security_verify_accesssecurity_verify_access_containerverify_identity_accessverify_identity_access_container
Weaknesses (CWE)
References & Reports
Advisories, patches, and third-party reports
Source: NIST NVD · Data may lag official sources by up to one minute