CVE-2026-11927: IBM Security Verify Access

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

IBM Security Verify Identity Access reverse proxy may allow parameters to be injected in requests to third party services.

Affected products

• IBM Security Verify Access
• IBM Security Verify Access Container
• IBM Verify Identity Access
• IBM Verify Identity Access Container

Published 2026-09-15. Last modified 2026-09-20.