High severity · published Sep 15, 2026
CVE-2026-12101
Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access
8.1
CVSS
0.4%
EPSS
No
On KEV
Description
IBM Verify Identity Access could allow an administrator to execute additional commands they are not entitled to due to improper validation of user supplied requests.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 31% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SV
Security Verify Access · IBM
10.0.0 through 10.0.9.2 Interim Fix 001 · source: vendor
SV
Security Verify Access Container · IBM
10.0.0 through 10.0.9.2 Interim Fix 001 · source: vendor
VI
Verify Identity Access · IBM
11.0.0 through 11.0.3 Interim Fix 001 · source: vendor
VI
Verify Identity Access Container · IBM
11.0.0 through 11.0.3 Interim Fix 001 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-12101
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-12101
www.ibm.com
https://www.ibm.com/support/pages/node/7286188
More from Security Verify Access
10.0
CVE-2024-28787
IBM Security Verify Access 10.0.0 through 10.0.7 and IBM Application Gateway 20.01 through 24.03 could allow a remote attacker to obtain highly sensitive private information or…
9.8
CVE-2026-78401
Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
9.8
CVE-2026-78406
Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
9.8
CVE-2026-11928
Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access
9.8
CVE-2026-17616
Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access