Remote Code Execution Vulnerability in IBM Security Verify Access & Identity Access

CVE-2026-78401

What is CVE-2026-78401?

CVE-2026-78401 is a critical remote code execution vulnerability found in IBM Security Verify Access and IBM Verify Identity Access, affecting versions 10.0 through 10.0.9.2 and 11.0 through 11.0.3. This vulnerability arises from the deserialization of untrusted data, enabling unauthenticated attackers to execute arbitrary code on affected systems. Given the software's role in managing access and identity validation for enterprise applications, the exploitation of this flaw could severely compromise security, potentially allowing attackers to manipulate user sessions, gain unauthorized access to sensitive information, or disrupt service availability. Organizations relying on these products for secure identity management may face substantial risks, including data breaches and operational disruptions.

Potential impact of CVE-2026-78401

1. Unauthorized Access: Exploiting this vulnerability could allow attackers to gain unauthorized control over affected systems, compromising sensitive user data and system integrity.

2. Operational Disruption: The ability to execute arbitrary code could lead to unauthorized changes in the system's configurations or operations, disrupting business processes and impacting service availability.

3. Increased Attack Surface: As IBM Security Verify Access and Identity Access are used widely in enterprises, the vulnerability not only affects individual organizations but could also extend risk to interconnected systems and networks, increasing the potential for widespread exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

This is an advertDeploy the Patch →

References