CVE-2026-12005
HighCVSS 7.2Exploitation Probability (EPSS)
Low risk30th percentile - higher than 30% of all known CVEs
Summary
IBM Security Verify Access and IBM Verify Identity Access (including container version) contain an input validation vulnerability in the management interface that allows already privileged attackers to execute additional operations by crafting a malicious HTTP request.
Risk Assessment
A privileged attacker may perform unauthorized operations, potentially leading to privilege escalation and system security compromise.
Recommendation
Install security patches from IBM and restrict access to the management interface to trusted administrators only.
Original NVD description (English source)
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 contains a input validation vulnerability in the management interface that allows already privileged attackers to execute additional operations by crafting a malicious HTTP request.