Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
7971 articles · 242779 vulns · 37/41 feeds (7d)
← Back to list
8.8
CVE-2026-109126PATCHED
IBM · Verify Identity Access and Security Verify Access

IBM Verify Identity Access and IBM Security Verify Access Hard-coded Credentials

Description

IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appliance could allow a physically proximate attacker to gain elevated privileges due to the use of hard-coded credentials.

Affected Products

VendorProductVersions
IBMVerify Identity Access and Security Verify Access11.0.3.1, 10.0.9.3

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
ibmsecurity verify accesscert_advisory90%

References

  • https://www.ibm.com/support/pages/node/7292606(vendor-advisory, patch)

Related News (2 articles)

Tier B
BSI Advisories6h ago
[NEU] [hoch] IBM Security Verify Access: Schwachstelle ermöglicht Privilegieneskalation
→ No new info (linked only)
Tier C
VulDB17h ago
CVE-2026-109126 | IBM Verify Identity Access/Security Verify Access 10.0.9.3/11.0.3.1 hard-coded credentials
→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.18.8 HIGH
VectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA KEV❌ No
Actively exploited❌ No
Patch available
https://www.ibm.com/support/pages/node/7292606
CWECWE-798
PublishedOct 19, 2026
Last enriched6h agov3
Trending Score43
Source articles3
Independent2
Info Completeness9/14
Missing: epss, kev, exploit, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

HIGHCVE-2026-105453
IBM Sterling Connect:Direct for Unix Improper Privilege Management
Trending: 43
HIGHCVE-2026-107366
Langflow OSS Authorization Bypass Through User-Controlled Key
Trending: 43
HIGHCVE-2026-102917
IBM i is Affected By An Improper Privilege Management Vulnerability
Trending: 39
CRITICALCVE-2026-93909
IBM WebSphere Application Server Liberty is affected by an authentication bypass
Trending: 35
HIGHCVE-2026-6719
IBM Concert Software Use of Insufficiently Random Values
Trending: 34

Pin to Dashboard

Verification

State: verified
Confidence: 100%

Vulnerability Timeline

CVE Published
Oct 19, 2026
Discovered by ZDM
Oct 20, 2026
Updated: vendor, product
Oct 20, 2026
Updated: description
Oct 20, 2026
Patch Available
Oct 20, 2026

Version History

v3
Last enriched 6h ago
v3Tier B6h ago

Article indicates vulnerability may be exploitable by network-adjacent attackers, contradicting the 'physically proximate' requirement in current record.

description
via BSI Advisories
v2Tier C17h ago

Updated vendor and product names; severity changed from HIGH to CRITICAL based on article's 'very critical' classification; adjusted CVSS estimate accordingly.

vendorproduct
via VulDB
v117h ago

Initial creation