{"id":"CVE-2026-11930","published":"2026-10-08T21:17:54.523","lastModified":"2026-10-09T15:17:13.353","description":"IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 may not enforce authorization correctly for some web servers.","cvssScore":5.9,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cwes":["CWE-285"],"vendors":["ibm"],"products":["security verify access","security verify access container","verify identity access","verify identity access container"],"references":[{"url":"https://www.ibm.com/support/pages/node/7291628","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":null}