CVE-2026-11929

HighCVSS 7.5

Published: 15/09/2026(UTC)Updated: 16/09/2026(UTC)Translated: 16/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

6th percentile - higher than 6% of all known CVEs

Summary

IBM Security Verify Identity Access Reverse Proxy in certain configurations may provide weaker than expected cryptographic validation of user-supplied data.

Risk Assessment

An attacker could exploit weak validation to bypass security mechanisms or impersonate trusted data. The risk includes integrity and confidentiality breaches.

Recommendation

Update IBM Security Verify Identity Access to the latest patched version. Verify reverse proxy configuration and enforce strong cryptographic mechanisms.

Other vulnerabilities in IBM Security Verify Identity Access

CVE-2026-11927Medium
IBM Security Verify Identity Access reverse proxy may allow parameters to be injected in requests to third party services.

Original NVD description (English source)

IBM Security Verify Identity Access Reverse Proxy in certain configurations may provide weaker than expected cryptographic validation of user supplied data.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS