IBM Verify Identity Access Denial of Service Vulnerability

Publication date: 2026-09-14

Last updated on: 2026-09-14

Assigner: IBM Corporation

Description

IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-14

Last Modified

2026-09-14

Generated

2026-09-15

AI Q&A

2026-09-15

EPSS Evaluated

N/A

NVD

CVE-2026-13260

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-770	The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

Attack-Flow Graph

Executive Summary

IBM Verify Identity Access has a vulnerability where a remote attacker could cause a denial of service by sending requests that are not properly validated. This means the system may not check incoming requests thoroughly, allowing attackers to disrupt services.

Impact Analysis

This vulnerability could lead to service disruptions for users relying on IBM Verify Identity Access. If exploited, it may cause the system to become unavailable, affecting authentication and identity management services.

Hi! I’m here to help you understand CVE-2026-13260. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70