CVE-2026-12101
Received Received - Intake

Improper Access Control in IBM Verify Identity Access

Publication date: 2026-09-15

Last updated on: 2026-09-15

Assigner: IBM Corporation

Description
IBM Verify Identity Access could allow an administrator to execute additional commands they are not entitled to due to improper validation of user supplied requests.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-15
Last Modified
2026-09-15
Generated
2026-09-15
AI Q&A
2026-09-15
EPSS Evaluated
N/A
NVD
CVE-2026-12101
EUVD
EUVD-2026-78884

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-289 The product performs authentication based on the name of a resource being accessed, or the name of the actor performing the access, but it does not properly check all possible names for that resource or actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in IBM Verify Identity Access allows an administrator to execute unauthorized commands due to improper validation of user-supplied requests. This means the system fails to correctly restrict actions that administrators should not be able to perform.

Impact Analysis

If exploited, this vulnerability could allow an attacker with administrative access to perform unintended actions, potentially leading to unauthorized system changes, data breaches, or further compromise of the identity management system.

Compliance Impact

This vulnerability could lead to unauthorized access or data exposure, which may violate compliance requirements such as GDPR or HIPAA. It undermines access controls and audit mechanisms, increasing the risk of regulatory penalties.

Mitigation Strategies

Apply IBM Verify Identity Access patches or updates as soon as they become available to address improper request validation.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-12101. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart