CVE-2026-4938
Incorrect Authorization in IBM Verify Identity Access and IBM Security Verify Access
- State
- Published
- Severity
- 6.5 Medium
- Published
- Jul 17, 2026
- Updated
- Jul 28, 2026
- Reserved
- Mar 26, 2026
Description
IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 and IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 could allow an attacker with read-only privileges to make unauthorized modifications and deployments outside of their assigned permissions.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 6.5 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N | ibm |
Weaknesses
- CWE-863 Incorrect Authorization
Affected Products
| Product | Versions |
|---|---|
Verify Identity AccessIBM |
|
Security Verify AccessIBM |
|
Verify Identity Access ContainerIBM |
|
Security Verify Access ContainerIBM |
|
References
- https://www.ibm.com/support/pages/node/7279510vendor-advisorypatch
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.