Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNews
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
972 articles · 101774 vulns · 37/41 feeds (7d)
← Back to list
8.1
CVE-2026-4101EXPLOITEDPATCHED
ibm · ibm verify identity access container

Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

Description

IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 under certain load conditions could allow an attacker to bypass authentication mechanisms and gain unauthorized access to the application.

Affected Products

VendorProductVersions
ibmibm verify identity access container11.0, 10.0, 11.0, 10.0

References

  • https://www.ibm.com/support/pages/node/7268253(vendor-advisory, patch)

Related News (1 articles)

Tier C
VulDB7h ago
CVE-2026-4101 | IBM Verify Identity Access Container up to 11.0.2 improper authentication
→ No new info (linked only)
CVSS 3.18.1 CRITICAL
VectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA KEV❌ No
Actively exploited✅ Yes
Patch available
https://www.ibm.com/support/pages/node/7268253
CWECWE-287
PublishedApr 1, 2026
Last enriched6h agov2
Tags
CVE-2026-4101
Trending Score48
Source articles1
Independent1
Info Completeness9/14
Missing: epss, kev, exploit, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

MEDIUMCVE-2025-36375EXP
IBM DataPower Gateway vulnerable to CSRF
Trending: 52
CRITICALCVE-2026-1345EXP
Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
Trending: 48
CRITICALCVE-2025-66485EXP
Multiple vulnerabilities have been addressed in IBM Aspera Shares
Trending: 48
HIGHCVE-2026-1491EXP
Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
Trending: 45
MEDIUMCVE-2025-36373
Incorrect administrative access control in IBM DataPower Gateway
Trending: 34

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Apr 1, 2026
Discovered by ZDM
Apr 1, 2026
Actively Exploited
Apr 1, 2026
Patch Available
Apr 1, 2026
Updated: severity, activelyExploited, tags
Apr 2, 2026

Version History

v2
Last enriched 6h ago
v2Tier C6h ago

Updated severity to CRITICAL, marked as actively exploited, and noted that no exploit is available.

severityactivelyExploitedtags
via VulDB
v110h ago

Initial creation