Veille CVE

Dimanche 20 septembre 2026

3 CVE

  1. CVE-2026-13272 5.4 Moyenne

    IBM Verify Identity Access · IBM Security Verify Access · IBM Verify Identity Access Container · IBM Security Verify Access Container

    IBM Verify Identity Access is missing origin validation which could allow a remote attacker to perform operations as the victim and potentially launch further attacks against the systems.

  2. CVE-2026-12101 8.1 Élevée

    IBM Verify Identity Access · IBM Security Verify Access · IBM Verify Identity Access Container · IBM Security Verify Access Container

    IBM Verify Identity Access could allow an administrator to execute additional commands they are not entitled to due to improper validation of user supplied requests.

  3. CVE-2026-11927 6.5 Moyenne

    IBM Verify Identity Access · IBM Security Verify Access · IBM Verify Identity Access Container · IBM Security Verify Access Container

    IBM Security Verify Identity Access reverse proxy may allow parameters to be injected in requests to third party services.