Description
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 and IBM Security Verify Access Container 10.0 through 10.0.9.2 Reverse Proxy in certain configurations is vulnerable to a denial of service attack.
Published: 2026-08-12
Score: 3.1 Low
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability is a denial of service flaw in the reverse proxy component of IBM Verify Identity Access and IBM Security Verify Access. When certain configurations are present, an attacker can trigger the reverse proxy to become unresponsive, causing the affected services to fail.

Affected Systems

Affected systems include IBM Verify Identity Access versions 11.0 through 11.0.3 and IBM Verify Identity Access Container versions 11.0 through 11.0.3; IBM Security Verify Access versions 10.0 through 10.0.9.2 and IBM Security Verify Access Container versions 10.0 through 10.0.9.2. The releases listed above are explicitly identified by IBM as vulnerable.

Risk and Exploitability

The CVSS score of 3.1 indicates low severity and low exploitability. The EPSS score is not available. IBM has not listed this vulnerability in the CISA KEV catalog. The vulnerability can be triggered by sending crafted requests to the reverse proxy in affected configurations, potentially causing a service crash or reset.

Generated by OpenCVE AI on August 12, 2026 at 22:34 UTC.

Remediation

Vendor Solution

IBM encourages customers to update their systems promptly. Appliance: Affected Products and Versions Fix availability IBM Verify Identity Access 11.0 - 11.0.3 Download IBM Verify Identity Access v11.0.3 IF1 https://www.ibm.com/support/fixcentral/swg/downloadFixes IBM Security Verify Access 10.0.0 - 10.0.9.2 Download IBM Security Verify Access v10.0.9.2 IF2 https://www.ibm.com/support/fixcentral/swg/downloadFixes Container: Container Download https://docs.verify.ibm.com/ibm-security-verify-access/docs/containers

OpenCVE Recommended Actions

  • Update IBM Verify Identity Access to v11.0.3 IF1 using the IBM Fix Central download link
  • Update IBM Security Verify Access to v10.0.9.2 IF2 using the IBM Fix Central download link
  • If an immediate update is not possible, restrict or disable the reverse proxy configuration to prevent external traffic from reaching the vulnerable component and monitor logs for anomalous requests
  • Apply the latest container images from the IBM Verify documentation source to ensure the container version includes the patch

Generated by OpenCVE AI on August 12, 2026 at 22:34 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 12 Aug 2026 21:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 12 Aug 2026 20:15:00 +0000

Type Values Removed Values Added
Description IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 and IBM Security Verify Access Container 10.0 through 10.0.9.2 Reverse Proxy in certain configurations is vulnerable to a denial of service attack.
Title Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
First Time appeared Ibm
Ibm security Verify Access
Ibm security Verify Access Container
Ibm verify Identity Access
Ibm verify Identity Access Container
Weaknesses CWE-416
CPEs cpe:2.3:a:ibm:security_verify_access:10.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:security_verify_access:10.0.9.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:security_verify_access:10.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:security_verify_access_container:10.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:security_verify_access_container:10.0.9.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:security_verify_access_container:10.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:verify_identity_access:11.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:verify_identity_access:11.0.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:verify_identity_access:11.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:verify_identity_access_container:11.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:verify_identity_access_container:11.0.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:verify_identity_access_container:11.0:*:*:*:*:*:*:*
Vendors & Products Ibm
Ibm security Verify Access
Ibm security Verify Access Container
Ibm verify Identity Access
Ibm verify Identity Access Container
References
Metrics cvssV3_1

{'score': 3.1, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L'}

Subscriptions

Ibm Security Verify Access Security Verify Access Container Verify Identity Access Verify Identity Access Container
cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published:

Updated: 2026-08-12T20:53:59.693Z

Reserved: 2026-06-10T19:41:50.340Z

Link: CVE-2026-11937

cve-icon Vulnrichment

Updated: 2026-08-12T20:33:39.832Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-08-12T20:17:33.390

Modified: 2026-08-12T21:17:34.657

Link: CVE-2026-11937

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-13T00:30:05Z

Weaknesses