- Description
- IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote unauthenticated attacker to execute arbitrary code on the system due to the deserialization of untrusted data.
- Source
- psirt@us.ibm.com
- NVD status
- Analyzed
- Products
- security_verify_access, security_verify_access_container, verify_identity_access, verify_identity_access_container
CVSS 3.1
- Type
- Secondary
- Base score
- 9.8
- Impact score
- 5.9
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity
- CRITICAL
- psirt@us.ibm.com
- CWE-502
- Hype score
- Not currently trending
⚠️ Vulnerabilidades identificadas en productos IBM ❗ CVE-2026-78406 ❗ CVE-2026-78401 ➡️ Más info: https://t.co/vxmrhCPBSJ https://t.co/UN0tEuWtqB
@CERTpy
16 Oct 2026
148 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Unpatched vulnerabilities don't stay hidden on our atlas. #CVE CRITICAL VULNERABILITY DETECTED CVE ID → CVE-2026-78406 Vendor → Ibm Severity → Critical — CVSS 9.8 Product → Security Verify Access Date → 2026-10-08 A critical vulnerability (Deserialization
@ThreatAtlas
9 Oct 2026
52 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🚨 IBM Verify Access — 7 CVEs, peak CVSS 9.8 CVE-2026-78401 & CVE-2026-78406: unauthenticated deserialization RCE CVE-2026-16823 & CVE-2026-19491: authentication bypass (9.1) No workarounds. Patch to 10.0.9.3 or 11.0.3.1. 🔗 https://t.co/fonEb2wP4O #CyberSecurity
@ThreatAft
9 Oct 2026
117 Impressions
2 Retweets
1 Like
0 Bookmarks
0 Replies
0 Quotes
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:security_verify_access:*:*:*:*:*:*:*:*",
"matchCriteriaId": "777CDCCB-0D41-4564-9F98-472FD964A435",
"versionEndExcluding": "10.0.9.3",
"versionStartIncluding": "10.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:ibm:security_verify_access_container:*:*:*:*:*:*:*:*",
"matchCriteriaId": "3A2C32F2-4063-42DA-8413-729D5D052375",
"versionEndIncluding": "10.0.9.2",
"versionStartIncluding": "10.0.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:ibm:verify_identity_access:*:*:*:*:*:*:*:*",
"matchCriteriaId": "95C7C630-4C8F-47F6-98C7-E665B84BA682",
"versionEndExcluding": "11.0.3.1",
"versionStartIncluding": "11.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:ibm:verify_identity_access_container:*:*:*:*:*:*:*:*",
"matchCriteriaId": "A25819B9-7101-415B-93F8-27FB72BA5C3D",
"versionEndIncluding": "11.0.3.0",
"versionStartIncluding": "11.0.0.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
]