Cross-Site Request Forgery Vulnerability in IBM Security Verify Access and Verify Identity Access
CVE-2026-78388

4.3MEDIUM

Key Information:

Vendor

IBM
Status
Security Verify Access
Verify Identity Access
Security Verify Access Container
Verify Identity Access Container
Vendor
CVE Published:
8 October 2026

What is CVE-2026-78388?

IBM Security Verify Access versions 10.0 through 10.0.9.2 and IBM Verify Identity Access versions 11.0 through 11.0.3 are susceptible to a Cross-Site Request Forgery (CSRF) vulnerability. This flaw enables attackers to perform unauthorized actions on behalf of trusted users, potentially leading to significant security breaches. The issue arises when a malicious actor exploits the trust that the website places in the user's browser. Prompt action is advised to mitigate risks associated with this vulnerability.

Affected Version(s)

Security Verify Access 10.0 <= 10.0.9.2

Security Verify Access Container 10.0 <= 10.0.9.2

Verify Identity Access 11.0 <= 11.0.3

References

https://www.ibm.com/support/pages/node/7291628
vendor-advisorypatch

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.