Elevated Privileges Risk in IBM Verify Identity Access and Security Verify Access Products
CVE-2026-109126

8.8HIGH

Key Information:

Vendor

IBM
Status
Verify Identity Access
Security Verify Access
Vendor
CVE Published:
19 October 2026

What is CVE-2026-109126?

IBM Verify Identity Access and IBM Security Verify Access are affected by a vulnerability that allows a physically proximate attacker to escalate privileges. This risk arises from the presence of hard-coded credentials within the system, which can be exploited to gain unauthorized access. Users are advised to apply the necessary patches to mitigate this vulnerability and secure their environments.

Affected Version(s)

Security Verify Access 10.0.9.3

Verify Identity Access 11.0.3.1

References

https://www.ibm.com/support/pages/node/7292606
vendor-advisorypatch

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.