← CVE Intelligence

CVE-2026-4938

Incorrect Authorization in IBM Verify Identity Access and IBM Security Verify Access PUBLISHED

Description (CNA)

IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 and IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 could allow an attacker with read-only privileges to make unauthorized modifications and deployments outside of their assigned permissions.

Affected (CNA)

Vendor / productVersions
IBM / Verify Identity Accessaffected 11.0 through 11.0.2
IBM / Security Verify Accessaffected 10.0 through 10.0.9.1
IBM / Verify Identity Access Containeraffected 11.0 through 11.0.2
IBM / Security Verify Access Containeraffected 10.0 through 10.0.9.1

CWE

CWE-863

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.