CVE-2026-13267: security verify access from 10.0.0 (inclusive), through 10.0.9.2 (inclusive), 10.0.9.2 · update interim_fix1; +6 more…

Affected technology

security verify access · from 10.0.0 (inclusive), through 10.0.9.2 (inclusive)
ibm

security verify access · 10.0.9.2 · update interim_fix1
ibm

verify identity access · from 11.0 (inclusive), through 11.0.3 (inclusive)
ibm

verify identity access container · from 11.0.0.0 (inclusive), through 11.0.3.0 (inclusive)
ibm

Security Verify Access · 10.0 through 10.0.9.2
IBM

Verify Identity Access · 11.0 through 11.0.3
IBM

Verify Identity Access Container · 11.0 through 11.0.3
IBM

Security Verify Access Container · 10.0 through 10.0.9.2
IBM

Description’s affected range: through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 could allow an authenticated user to gain privileges of another user via a specially crafted request

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

An authenticated user could gain privileges of another user via a specially crafted request. Vendor/CNA’s CVSS 3.1 assessment (base score 8.1/10) rates confidentiality and integrity impact as high; availability impact as none.