CVE-2026-12358: IBM Security Verify Access

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources.

Affected products

• IBM Security Verify Access
• IBM Security Verify Access Container
• IBM Verify Identity Access
• IBM Verify Identity Access Container

Published 2026-09-15. Last modified 2026-09-16.