P4Verified

CVE-2026-16916: Security Verify Access 10.0 through 10.0.9.2; +3 more affected products

CVE-2026-16916. CVSS 3.1 base score 9.1 (GitHub Advisory Database).

Affected technology

Security Verify Access · 10.0 through 10.0.9.2
IBM

Verify Identity Access · 11.0 through 11.0.3
IBM

Security Verify Access Container · 10.0 through 10.0.9.2
IBM

Verify Identity Access Container · 11.0 through 11.0.3
IBM

Description’s affected range: through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · High privileges required · No user interaction required

What an attacker can do

A remote authenticated attacker could execute arbitrary code due to a protection mechanism failure. Vendor/CNA’s CVSS 3.1 assessment (base score 9.1/10) rates confidentiality, integrity and availability impact as high.

Published 2026-10-09 03:15:36.853071+00:00

CWE: CWE-693
CCR priority: 36.4 /100 (P4)
CVSS 3.1: 9.1 /10 · CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H · GitHub Advisory Database
KEV: no

Provenance

GitHub Advisory Database · Source record · observed 2026-10-09 03:17:07.463462+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-09 03:13:32.966430+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-16916.html