IBM Product Security Update Advisory

Overview

---

Security updates have been released to address vulnerabilities in IBM products. the affected products are IBM Verify Identity Access Container, IBM Security Verify Access Container, IBM Verify Identity Access, and IBM Security Verify Access.

Affected products and versions

---

• IBM Verify Identity Access Container versions 11.0 and later and 11.0.2 and earlier.
• IBM Security Verify Access Container version 10.0 or later and 10.0.9.1 or earlier.
• IBM Verify Identity Access version 11.0 or later and 11.0.2 or earlier.
• IBM Security Verify Access version 10.0 or later and 10.0.9.1 or earlier.

Resolved Vulnerabilities

---

• CVE-2026-1342: An arbitrary script execution vulnerability in IBM Verify Identity Access and IBM Security Verify Access.
• CVE-2026-1343: A server-side request forgery (SSRF) vulnerability in IBM Verify Identity Access and IBM Security Verify Access that causes the server to send a request to an internal or external address, depending on the threat actor’s intent.
• CVE-2026-1346: A privilege escalation vulnerability in IBM Verify Identity Access and IBM Security Verify Access.

What to do

---

vulnerability patches have been made available in the latest updates. you should follow the instructions on the reference site to update to the following versions or later

• IBM Verify Identity Access Container 11.0.3 or later.
• IBM Security Verify Access Container 10.0.10 or later.
• IBM Verify Identity Access 11.0.3 or later.
• IBM Security Verify Access 10.0.10 or later.

Notes

---

• Security Bulletin: Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access.