CVE-2026-109126

IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appliance could allow a physically proximate attacker to gain elevated privileges due to the use of hard-coded credentials.

Score

CVSS 3.1 8.8 High

Status

Awaiting Analysis - psirt@us.ibm.com

Published

2026-10-19

Last modified

2026-10-20

Weaknesses

CWE-798

Affected products

• Security Verify Access (Ibm)
• Verify Identity Access (Ibm)

References

• https://www.ibm.com/support/pages/node/7292606