{"id":"CVE-2026-19494","published":"2026-10-08T21:17:57.340","lastModified":"2026-10-10T13:17:32.163","description":"IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication.","cvssScore":8.1,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","cwes":["CWE-287"],"vendors":["ibm"],"products":["security verify access","security verify access container","verify identity access","verify identity access container"],"references":[{"url":"https://www.ibm.com/support/pages/node/7291628","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"IBM Security Verify Access and Verify Identity Access allow authenticated attackers to bypass authentication restrictions, potentially enabling unauthorized access to protected resources. This vulnerability could lead to privilege escalation or data exposure.","exploitability":"Exploitation requires an authenticated user account with access to the affected systems, making it moderately difficult to exploit without prior access but still feasible for attackers who have already compromised a valid login.","blast_radius":"If exploited, this vulnerability could allow attackers to access sensitive identity management functions and potentially escalate privileges across multiple applications that rely on these security services.","remediation":"Upgrade to IBM Security Verify Access 10.0.9.3 or IBM Verify Identity Access 11.0.4","detection":"No reliable host or network indicator is derivable from the published description.","tags":["auth-bypass","identity-management","access-control"],"model":"garnet-coder","analyzedAt":"2026-10-16T09:19:34.976Z"}}