Skip to content
CVE-2026-109126: IBM Verify Identity Access Vulnerability

CVE-2026-109126: IBM Verify Identity Access Vulnerability

First seen 20 Oct 2026, 15:52 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 20, 2026 at 16:14 UTC
  • •CVE-2026-109126 affects IBM Verify Identity Access and Security Verify Access.
  • •The vulnerability allows local attackers to exploit hard-coded credentials for elevated privileges.
  • •Patches are available, and organizations are urged to update their systems immediately.

A high-impact security vulnerability, CVE-2026-109126, has been identified in IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3. The flaw allows a physically proximate attacker to gain elevated privileges due to hard-coded credentials. This vulnerability does not require prior privileges or user interaction, making it particularly concerning for organizations with shared data centers or accessible management interfaces. IBM has released patches (versions 11.0.3.2 and 10.0.9.4) to address the issue, and customers are encouraged to update their systems promptly. The CVSS score for this vulnerability is 8.8, indicating a high severity level. No active exploitation has been reported, but organizations should remain vigilant and review authentication logs for unusual activity.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-19
CVE-2026-109126 published
IBM disclosed a vulnerability in their Verify Identity Access products with a CVSS score of 8.8.
www.ibm.com
2026-10-20
Patches released
IBM released updates for affected products, urging customers to apply them promptly.
www.ibm.com
2026-10-20
CVE Alert published
Redpacketsecurity reported on CVE-2026-109126, highlighting the risks and mitigation strategies.
Redpacketsecurity

More articles in this cluster (2)

Following this threat?

Track CVE-2026-109126 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (6)

1 / 3

Common questions

Which versions are affected?
IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 are affected.
What is the CVSS score?
The CVSS score for CVE-2026-109126 is 8.8, indicating a high severity vulnerability.
What should organizations do?
Organizations should apply the patches (versions 11.0.3.2 and 10.0.9.4) released by IBM as soon as possible.