CVE-2026-4101 - Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access · CoreCVE

Back Back to CVE browser

CRITICAL

Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

Published Apr 1, 2026

9.8

CRITICAL

CVSS 3.1

EPSS 0.52%

Description

IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 under certain load conditions could allow an attacker to bypass authentication mechanisms and gain unauthorized access to the application.

Affected products

Vendor IBM Product Security Verify Access Default
n/a
- Version
  10.0
  Status
  affected
  Constraints
  <=10.0.9.1
Vendor IBM Product Security Verify Access Container Default
n/a
- Version
  10.0
  Status
  affected
  Constraints
  <=10.0.9.1
Vendor IBM Product Verify Identity Access Default
n/a
- Version
  11.0
  Status
  affected
  Constraints
  <=11.0.2
Vendor IBM Product Verify Identity Access Container Default
n/a
- Version
  11.0
  Status
  affected
  Constraints
  <=11.0.2

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Security Verify Access

n/a

Version	Status	Constraints
10.0	affected	<=10.0.9.1

Security Verify Access Container

n/a

Version	Status	Constraints
10.0	affected	<=10.0.9.1

Verify Identity Access

n/a

Version	Status	Constraints
11.0	affected	<=11.0.2

Verify Identity Access Container

n/a

Version	Status	Constraints
11.0	affected	<=11.0.2

Remediation

Vendor solution

IBM encourages customers to update their systems promptly.

Appliance:

Affected Products and Versions

Fix availability

IBM Verify Identity Access 11.0 - 11.0.2

Download IBM Verify Identity Access v11.0.2 IF1 https://www.ibm.com/support/fixcentral/quickorder

IBM Security Verify Access 10.0 - 10.0.9.1

Download IBM Security Verify Access v10.0.9.1 IF1 https://www.ibm.com/support/fixcentral/quickorder

Weaknesses (1)

CWE-287

Improper Authentication

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-18066
Advisory
https://www.ibm.com/support/pages/node/7268253
vendor-advisorypatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-18066		Advisory
https://www.ibm.com/support/pages/node/7268253		vendor-advisorypatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner ibm

Published Apr 1, 2026

Updated Apr 3, 2026

Reserved Mar 13, 2026

Link CVE-2026-4101

CISA Vulnrichment

Updated Apr 3, 2026

Status Analyzed

Modified Jun 17, 2026

Link CVE-2026-4101

Severity n/a

Public date n/a

Links CVE-2026-4101

Assigner ibm

Published Apr 1, 2026

Updated Apr 3, 2026

Exploited since n/a

Link EUVD-2026-18066

EUVD-2026-18066