CVE-2026-11928: IBM Security Verify Access

Critical severity, CVSS 9.8. EPSS: 0.3% chance of exploitation in the next 30 days.

IBM Verify Identity Access is vulnerable to a buffer overflow attack.

Affected products

• IBM Security Verify Access
• IBM Security Verify Access Container
• IBM Verify Identity Access
• IBM Verify Identity Access Container

Published 2026-09-15. Last modified 2026-09-17.