CVE-2026-19482

Summary

This vulnerability allows a remote authenticated attacker to execute arbitrary commands due to improper handling of command arguments, posing a significant risk to system security.

Exploitability

Exploitation requires a valid login and access to the affected IBM Security Verify Access or IBM Verify Identity Access versions. The attacker must craft specific command arguments to succeed.

Blast radius

If exploited, the attacker could gain full control over the affected system, leading to data loss, system compromise, and potential lateral movement within the network.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to IBM Security Verify Access 10.0.10 or later, or IBM Verify Identity Access 11.0.4 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.