Veille CVE

Semaine du 14 septembre au 20 septembre 2026

12 CVE

Critique 2 Élevée 6 Moyenne 4 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « IBM Security Verify Access Container » ✕
  1. CVE-2026-12358 7.5 Élevée

    IBM Verify Identity Access · IBM Security Verify Access · IBM Verify Identity Access Container · IBM Security Verify Access Container

    IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources.

  2. CVE-2026-12101 8.1 Élevée

    IBM Verify Identity Access · IBM Security Verify Access · IBM Verify Identity Access Container · IBM Security Verify Access Container

    IBM Verify Identity Access could allow an administrator to execute additional commands they are not entitled to due to improper validation of user supplied requests.

  3. CVE-2026-11934 7.2 Élevée

    IBM Verify Identity Access · IBM Security Verify Access · IBM Verify Identity Access Container · IBM Security Verify Access Container

    IBM Verify Identity Access could allow an administrator to execute additional commands they are not entitled to due to improper validation of user supplied input.

  4. CVE-2026-11929 7.5 Élevée

    IBM Verify Identity Access · IBM Security Verify Access · IBM Verify Identity Access Container · IBM Security Verify Access Container

    IBM Security Verify Identity Access Reverse Proxy in certain configurations may provide weaker than expected cryptographic validation of user supplied data.

  5. CVE-2026-11928 9.8 Critique

    IBM Verify Identity Access · IBM Security Verify Access · IBM Verify Identity Access Container · IBM Security Verify Access Container

    IBM Verify Identity Access is vulnerable to a buffer overflow attack.

  6. CVE-2026-11927 6.5 Moyenne

    IBM Verify Identity Access · IBM Security Verify Access · IBM Verify Identity Access Container · IBM Security Verify Access Container

    IBM Security Verify Identity Access reverse proxy may allow parameters to be injected in requests to third party services.

  7. CVE-2026-11926 7.5 Élevée

    IBM Verify Identity Access · IBM Security Verify Access · IBM Verify Identity Access Container · IBM Security Verify Access Container

    IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources.

  8. CVE-2026-11921 9.1 Critique

    IBM Verify Identity Access · IBM Security Verify Access · IBM Verify Identity Access Container · IBM Security Verify Access Container

    IBM Verify Identity Access containers may not apply management password change operations correctly.

  9. CVE-2026-13277 4.7 Moyenne

    IBM Verify Identity Access · IBM Security Verify Access · IBM Verify Identity Access Container · IBM Security Verify Access Container

    IBM Verify Identity Access could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim.

  10. CVE-2026-13276 6.1 Moyenne

    IBM Verify Identity Access · IBM Security Verify Access · IBM Verify Identity Access Container · IBM Security Verify Access Container

    IBM Verify Identity Access 11.0.0 through 11.0.3 Interim Fix 001 and IBM Security Verify Access 10.0.0 through 10.0.9.2 Interim Fix 001 and IBM Verify Identity Access Container 11.0.0 through 11.0.3 Interim Fix 001 and IBM Security Verify Access Container 10.0.0 through 10.0.9.2 Interim Fix 001.

  11. CVE-2026-13272 5.4 Moyenne

    IBM Verify Identity Access · IBM Security Verify Access · IBM Verify Identity Access Container · IBM Security Verify Access Container

    IBM Verify Identity Access is missing origin validation which could allow a remote attacker to perform operations as the victim and potentially launch further attacks against the systems.

  12. CVE-2026-13260 7.5 Élevée

    IBM Verify Identity Access · IBM Security Verify Access · IBM Verify Identity Access Container · IBM Security Verify Access Container

    IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources.