{"id":"CVE-2026-19482","published":"2026-10-08T21:17:56.930","lastModified":"2026-10-10T04:18:12.647","description":"IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of command arguments.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-88"],"vendors":["ibm"],"products":["security verify access","security verify access container","verify identity access","verify identity access container"],"references":[{"url":"https://www.ibm.com/support/pages/node/7291628","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"This vulnerability allows a remote authenticated attacker to execute arbitrary commands due to improper handling of command arguments, posing a significant risk to system security.","exploitability":"Exploitation requires a valid login and access to the affected IBM Security Verify Access or IBM Verify Identity Access versions. The attacker must craft specific command arguments to succeed.","blast_radius":"If exploited, the attacker could gain full control over the affected system, leading to data loss, system compromise, and potential lateral movement within the network.","remediation":"Upgrade to IBM Security Verify Access 10.0.10 or later, or IBM Verify Identity Access 11.0.4 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","auth","web","command-exec"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-09T08:44:35.522Z"}}