CVE-2026-11921: IBM Security Verify Access

Critical severity, CVSS 9.1. EPSS: 0.2% chance of exploitation in the next 30 days.

IBM Verify Identity Access containers may not apply management password change operations correctly.

Affected products

• IBM Security Verify Access
• IBM Security Verify Access Container
• IBM Verify Identity Access
• IBM Verify Identity Access Container

Published 2026-09-15. Last modified 2026-09-17.