CVE-2026-13277 — Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access

Description (CNA)

IBM Verify Identity Access could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim.

Affected (CNA)

Vendor / product	Versions
IBM / Verify Identity Access	affected 11.0.0 through 11.0.3 Interim Fix 001
IBM / Security Verify Access	affected 10.0.0 through 10.0.9.2 Interim Fix 001
IBM / Verify Identity Access Container	affected 11.0.0 through 11.0.3 Interim Fix 001
IBM / Security Verify Access Container	affected 10.0.0 through 10.0.9.2 Interim Fix 001

CWE

CWE-601

References

https://www.ibm.com/support/pages/node/7286188

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.