IBM Security Verify Identity Access Reverse Proxy Vulnerability
CVE-2026-11927

Currently unrated

Key Information:

Vendor

IBM
Status
Verify Identity Access
Security Verify Access
Verify Identity Access Container
Security Verify Access Container
Vendor
CVE Published:
15 September 2026

What is CVE-2026-11927?

A vulnerability has been identified in IBM Security Verify Identity Access that allows for the injection of malicious parameters into requests sent to third-party services through its reverse proxy functionality. This flaw can potentially be exploited by attackers to manipulate requests and access sensitive data, posing significant security risks for organizations relying on this service.

Affected Version(s)

Security Verify Access 10.0.0 <= 10.0.9.2 Interim Fix 001

Security Verify Access Container 10.0.0 <= 10.0.9.2 Interim Fix 001

Verify Identity Access 11.0.0 <= 11.0.3 Interim Fix 001

References

https://www.ibm.com/support/pages/node/7286188
vendor-advisorypatch

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.