CVE-2026-11929

Awaiting Analysis Awaiting Analysis - Queue

BaseFortify

Publication date: 2026-09-15

Last updated on: 2026-09-16

Assigner: IBM Corporation

Description

IBM Security Verify Identity Access Reverse Proxy in certain configurations may provide weaker than expected cryptographic validation of user supplied data.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-16

Generated

2026-10-19

AI Q&A

2026-09-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-11929

EUVD

EUVD-2026-78888

Affected Vendors & Products

Vendor	Product	Version / Range
IBM	Verify	Identity Access 11.0.0
IBM	Security	Verify Access 10.0.0
IBM	Verify	Identity Access Container 11.0.0
IBM	Security	Verify Access Container 10.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-327	The product uses a broken or risky cryptographic algorithm or protocol.

Attack-Flow Graph

Executive Summary

IBM Security Verify Identity Access Reverse Proxy in certain configurations may provide weaker than expected cryptographic validation of user supplied data. This means the system might not properly verify the integrity or authenticity of data sent by users, potentially allowing tampered or malicious data to be processed.

Impact Analysis

This vulnerability could allow attackers to bypass security controls by sending altered data that the system incorrectly trusts. This might lead to unauthorized access, data breaches, or other malicious activities depending on how the reverse proxy is used in your environment.

Compliance Impact

This vulnerability may lead to weaker cryptographic validation of user data, potentially exposing sensitive information. This could impact compliance with GDPR (data protection) and HIPAA (healthcare data security) by increasing the risk of unauthorized access or data breaches.

Mitigation Strategies

Update IBM Security Verify Identity Access Reverse Proxy to the latest version to ensure proper cryptographic validation. Review and enforce stronger cryptographic settings in the proxy configuration.

Hi! I’m here to help you understand CVE-2026-11929. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70