{"id":"CVE-2026-19493","published":"2026-10-08T21:17:57.203","lastModified":"2026-10-12T23:17:36.840","description":"IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to perform an arbitrary file write due to path traversal.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cwes":["CWE-22"],"vendors":["ibm"],"products":["security verify access","security verify access container","verify identity access","verify identity access container"],"references":[{"url":"https://www.ibm.com/support/pages/node/7291628","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A path traversal vulnerability in IBM Security Verify Access and Verify Identity Access allows remote attackers to write arbitrary files to the system, potentially leading to unauthorized modifications of critical application components or configuration files.","exploitability":"Exploitation requires a remote attacker with network access to the vulnerable service, but is relatively straightforward since it involves crafting a malicious request that traverses directories to write files anywhere in the filesystem.","blast_radius":"If exploited, this vulnerability could allow attackers to modify critical authentication components, configuration files, or inject malicious code into the application, potentially leading to full system compromise or unauthorized access to protected resources.","remediation":"Upgrade to IBM Security Verify Access 10.0.9.3 or IBM Verify Identity Access 11.0.4 which contain the fix for this path traversal vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["path-traversal","file-write","authentication"],"model":"garnet-coder","analyzedAt":"2026-10-16T09:24:45.202Z"}}