OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-12091

LOW · CVSS 3.7 EPSS 0.30%

Source: NVD + CISA KEV + EPSS · Published 2026-10-08 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

IBM Security Verify Access versions 10.0 through 10.0.9.2 and IBM Verify Identity Access versions 11.0 through 11.0.3 are vulnerable to a denial of service due to a heap-based out-of-bounds read. A remote attacker can exploit this vulnerability by sending a specially crafted request, potentially leading to service disruption. Organizations using these specific IBM products should prioritize remediation to mitigate the risk of service interruptions.

CVE
CVE-2026-12091
Severity
LOW
CVSS
3.7
EPSS
0.30%

Original NVD Description

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a denial of service due to a heap-based out-of-bounds read. A remote attacker could send a specially crafted request that causes a limited out‑of‑bounds memory read.

Related CVEs

Other vulnerabilities affecting the same vendor(s)