CVE-2026-13267

HighCVSS 8.1

Published: 12/08/2026(UTC)Updated: 17/08/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

16th percentile - higher than 16% of all known CVEs

Summary

IBM Security Verify Access and IBM Verify Identity Access (including container version) allow an authenticated user to gain privileges of another user via a specially crafted request.

Risk Assessment

Risk of privilege escalation within the system, potentially leading to unauthorized access to data and administrative functions.

Recommendation

Apply available security patches from IBM and restrict system access to trusted users only.

Original NVD description (English source)

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 could allow an authenticated user to gain privileges of another user via a specially crafted request.