Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNews
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
972 articles · 101774 vulns · 37/41 feeds (7d)
← Back to list
5.3
CVE-2026-1491EXPLOITEDPATCHED
ibm · verify identity access container

Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

Description

A vulnerability, which was classified as problematic, was found in IBM Verify Identity Access Container, Security Verify Access Container, Verify Identity Access and Security Verify Access up to 11.0.2. The impacted element is an unknown function of the component Reverse Proxy Handler. Executing a manipulation can lead to http request smuggling.

Affected Products

VendorProductVersions
ibmverify identity access container11.0, 10.0, 11.0, 10.0, 11.0.2

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
ibmsecurity verify access containermitre_affected90%
ibmverify identity accessmitre_affected90%
ibmsecurity verify accessmitre_affected90%

References

  • https://www.ibm.com/support/pages/node/7268253(vendor-advisory, patch)

Related News (1 articles)

Tier C
VulDB7h ago
CVE-2026-1491 | IBM Verify Identity Access Container up to 11.0.2 Reverse Proxy request smuggling
→ No new info (linked only)
CVSS 3.15.3 HIGH
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CISA KEV❌ No
Actively exploited✅ Yes
Patch available
https://www.ibm.com/support/pages/node/7268253
CWECWE-444
PublishedApr 1, 2026
Last enriched6h agov2
Trending Score46
Source articles1
Independent1
Info Completeness9/14
Missing: epss, kev, exploit, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

MEDIUMCVE-2025-36375EXP
IBM DataPower Gateway vulnerable to CSRF
Trending: 53
CRITICALCVE-2026-1345EXP
Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
Trending: 48
CRITICALCVE-2025-66485EXP
Multiple vulnerabilities have been addressed in IBM Aspera Shares
Trending: 48
CRITICALCVE-2026-4101EXP
Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
Trending: 48
MEDIUMCVE-2025-36373
Incorrect administrative access control in IBM DataPower Gateway
Trending: 34

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Apr 1, 2026
Discovered by ZDM
Apr 1, 2026
Actively Exploited
Apr 1, 2026
Patch Available
Apr 1, 2026
Updated: description, affectedVersions, severity, activelyExploited
Apr 2, 2026

Version History

v2
Last enriched 6h ago
v2Tier C6h ago

Updated description with technical details, changed severity to HIGH, and noted that no exploit is available.

descriptionaffectedVersionsseverityactivelyExploited
via VulDB
v110h ago

Initial creation