CVE-2026-12618
HighCVSS 7.2Exploitation Probability (EPSS)
Low risk30th percentile - higher than 30% of all known CVEs
Summary
IBM Security Verify Access and IBM Verify Identity Access (including container version) allow an administrator to execute additional commands they are not entitled to due to improper validation of user supplied input.
Risk Assessment
An administrator may perform unauthorized operations, potentially compromising system integrity and leading to uncontrolled configuration changes.
Recommendation
Install security patches from IBM and strengthen input validation in the administrative interface.
Original NVD description (English source)
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 could allow an administrator to execute additional commands they are not entitled to due to improper validation of user supplied input.