CVE-2026-19878

Awaiting Analysis Awaiting Analysis - Queue

IBM Security Verify Access Authentication Bypass Vulnerability

Publication date: 2026-10-08

Last updated on: 2026-10-08

Assigner: IBM Corporation

Description

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to bypass additional authentication workflow steps.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-08

Last Modified

2026-10-08

Generated

2026-10-09

AI Q&A

2026-10-09

EPSS Evaluated

N/A

NVD

CVE-2026-19878

Affected Vendors & Products

Vendor	Product	Version / Range
IBM	Security	Verify Access 10.0
IBM	Verify	Identity Access 11.0
IBM	Security	Verify Access Container 10.0
IBM	Verify	Identity Access Container 11.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-841	The product supports a session in which more than one behavior must be performed by an actor, but it does not properly ensure that the actor performs the behaviors in the required sequence.

Attack-Flow Graph

Executive Summary

This vulnerability allows a remote authenticated attacker to bypass additional authentication steps in IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3. This could let an attacker gain unauthorized access to protected resources.

Impact Analysis

An attacker could exploit this to bypass authentication and access sensitive data or perform actions they should not be authorized for. This may lead to data breaches, unauthorized account access, or other security incidents depending on the system's configuration.

Compliance Impact

This vulnerability could violate compliance requirements that mandate strong authentication and access controls, such as GDPR (data protection) or HIPAA (healthcare data). Exploitation may result in unauthorized data exposure, leading to regulatory penalties or legal consequences.

Mitigation Strategies

Apply the latest security patches or updates provided by IBM for IBM Security Verify Access or IBM Verify Identity Access. Review and enforce additional authentication workflow steps to ensure they cannot be bypassed. Monitor network traffic for unusual authentication bypass attempts.

Hi! I’m here to help you understand CVE-2026-19878. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70