Auth bypass in IBM Security Verify Access

CVE-2026-11934

IBM Verify Identity Access could allow an administrator to execute additional commands they are not entitled to due to improper validation of user supplied input.

CVSS v3 metric

CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2026-11934?
CVE-2026-11934 is a high-severity vulnerability in IBM Security Verify Access, classified under Improper Authorization. CVSS score: 7.2/10. Published 2026-09-15.
How severe is CVE-2026-11934?
High severity. CVSS v3 base score is 7.2 out of 10.