Information Disclosure Vulnerability in IBM Verify Identity Access Advanced Access Control
CVE-2026-13297

Currently unrated

Key Information:

Vendor

IBM
Status
Verify Identity Access
Security Verify Access
Verify Identity Access Container
Security Verify Access Container
Vendor
CVE Published:
4 September 2026

What is CVE-2026-13297?

IBM Verify Identity Access Advanced Access Control may be exposed to an information disclosure vulnerability, potentially allowing unauthorized access to sensitive data. This exploit could enable attackers to retrieve confidential information, compromising the security and integrity of affected systems. Users of this product should remain vigilant and apply the recommended security patches as outlined in the vendor advisory to mitigate the risk.

Affected Version(s)

Security Verify Access 10.0.0 <= 10.0.9.2 Interim Fix 001

Security Verify Access Container 10.0.0 <= 10.0.9.2 Interim Fix 001

Verify Identity Access 11.0.0 <= 11.0.3 Interim Fix 001

References

https://www.ibm.com/support/pages/node/7286188
vendor-advisorypatch

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.