CVE-2026-19493

Summary

A path traversal vulnerability in IBM Security Verify Access and Verify Identity Access allows remote attackers to write arbitrary files to the system, potentially leading to unauthorized modifications of critical application components or configuration files.

Exploitability

Exploitation requires a remote attacker with network access to the vulnerable service, but is relatively straightforward since it involves crafting a malicious request that traverses directories to write files anywhere in the filesystem.

Blast radius

If exploited, this vulnerability could allow attackers to modify critical authentication components, configuration files, or inject malicious code into the application, potentially leading to full system compromise or unauthorized access to protected resources.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to IBM Security Verify Access 10.0.9.3 or IBM Verify Identity Access 11.0.4 which contain the fix for this path traversal vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.