CVE-2026-11927

{"id": "CVE-2026-11927", "cveTags": [], "metrics": {}, "affected": [{"source": "psirt@us.ibm.com", "affectedData": [{"cpes": ["cpe:2.3:a:ibm:verify_identity_access:11.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:verify_identity_access:11.0.3:interim_fix_001:*:*:*:*:*:*"], "vendor": "IBM", "product": "Verify Identity Access", "versions": [{"status": "affected", "version": "11.0.0", "versionType": "semver", "lessThanOrEqual": "11.0.3 Interim Fix 001"}]}, {"cpes": ["cpe:2.3:a:ibm:security_verify_access:10.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:security_verify_access:10.0.9.2:interim_fix_001:*:*:*:*:*:*"], "vendor": "IBM", "product": "Security Verify Access", "versions": [{"status": "affected", "version": "10.0.0", "versionType": "semver", "lessThanOrEqual": "10.0.9.2 Interim Fix 001"}]}, {"cpes": ["cpe:2.3:a:ibm:verify_identity_access_container:11.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:verify_identity_access_container:11.0.3:interim_fix_001:*:*:*:*:*:*"], "vendor": "IBM", "product": "Verify Identity Access Container", "versions": [{"status": "affected", "version": "11.0.0", "versionType": "semver", "lessThanOrEqual": "11.0.3 Interim Fix 001"}]}, {"cpes": ["cpe:2.3:a:ibm:security_verify_access_container:10.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:security_verify_access_container:10.0.9.2:interim_fix_001:*:*:*:*:*:*"], "vendor": "IBM", "product": "Security Verify Access Container", "versions": [{"status": "affected", "version": "10.0.0", "versionType": "semver", "lessThanOrEqual": "10.0.9.2 Interim Fix 001"}]}]}], "published": "2026-09-15T18:17:13.070", "references": [{"url": "https://www.ibm.com/support/pages/node/7286188", "source": "psirt@us.ibm.com"}], "vulnStatus": "Received", "weaknesses": [{"type": "Primary", "source": "psirt@us.ibm.com", "description": [{"lang": "en", "value": "CWE-74"}]}], "descriptions": [{"lang": "en", "value": "IBM Security Verify Identity Access reverse proxy may allow parameters to be injected in requests to third party services."}], "lastModified": "2026-09-15T18:17:13.070", "sourceIdentifier": "psirt@us.ibm.com"}