CVE-2026-13267
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 could…
Published Aug 12, 2026 · updated Oct 14, 2026 · ibm security verify access
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 could allow an authenticated user to gain privileges of another user via a specially crafted request.
Timeline
Detection, updates, and resolution for this record.
Aug 12, 2026 · NIST NVD
Detected
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 could allow an authenticated user to gain privileges of another user via a specially crafted request.
Oct 14, 2026 · NIST NVD
Updated
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 could allow an authenticated user to gain privileges of another user via a specially crafted request.
Affected
- cpe ibm/security verify accessversion unspecified
- cpe ibm/security verify access10.0.9.2
- cpe ibm/verify identity accessversion unspecified
- cpe ibm/verify identity access containerversion unspecified
Sources
- CVE.orgCVE-2026-13267
Official CVE identifier
cve.org - FIRST EPSSCVE-2026-13267
30-day exploitation probability 0.4%
first.org - NIST NVDCVE-2026-13267
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 could allow an authenticated user to gain privileges of another user via a specially crafted request.
nvd.nist.gov