CVE-2026-11927

MediumCVSS 6.5

Published: 15/09/2026(UTC)Updated: 20/09/2026(UTC)Translated: 16/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.17%

7th percentile - higher than 7% of all known CVEs

Summary

IBM Security Verify Identity Access reverse proxy may allow parameters to be injected in requests to third party services.

Risk Assessment

This could allow an attacker to manipulate requests forwarded to external services, potentially leading to unauthorized actions or data security breaches.

Recommendation

Configure the reverse proxy to restrict parameter injection and apply security updates from IBM.

Other vulnerabilities in IBM Security Verify Identity Access

CVE-2026-11929High
IBM Security Verify Identity Access Reverse Proxy in certain configurations may provide weaker than expected cryptographic validation of user-supplied data.

Original NVD description (English source)

IBM Security Verify Identity Access reverse proxy may allow parameters to be injected in requests to third party services.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS