IBM Product Security Update Advisory

overview

We have released security updates that address vulnerabilities in IBM products. users of affected products are encouraged to update to the latest version.

affected products

Cve-2026-1345, cve-2026-4101

IBM Verify Identity Access Container versions: 11.0 or later and 11.0.2 or earlier
IBM Security Verify Access Container version: 10.0 or later and 10.0.9.1 or earlier
IBM Verify Identity Access Version: 11.0 or later and 11.0.2 or earlier
IBM Security Verify Access Version: 10.0 or later and 10.0.9.1 or earlier

resolved vulnerabilities

Arbitrary command execution vulnerability in IBM Verify Identity Access and IBM Security Verify Access (CVE-2026-1345)
Authentication bypass vulnerability in IBM Verify Identity Access and IBM Security Verify Access (CVE-2026-4101)

vulnerability patches

Vulnerability patches have been made available in the latest update. please follow the instructions on the reference site to update to the latest version of the vulnerability patch.

Cve-2026-1345, cve-2026-4101

IBM Verify Identity Access version: v11.0.2 IF1
IBM Security Verify Access Version: v10.0.9.1 IF1

references

[1] Security Bulletin: Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
https://www.ibm.com/support/pages/node/7268253