CVE-2026-19494

Summary

IBM Security Verify Access and Verify Identity Access allow authenticated attackers to bypass authentication restrictions, potentially enabling unauthorized access to protected resources. This vulnerability could lead to privilege escalation or data exposure.

Exploitability

Exploitation requires an authenticated user account with access to the affected systems, making it moderately difficult to exploit without prior access but still feasible for attackers who have already compromised a valid login.

Blast radius

If exploited, this vulnerability could allow attackers to access sensitive identity management functions and potentially escalate privileges across multiple applications that rely on these security services.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to IBM Security Verify Access 10.0.9.3 or IBM Verify Identity Access 11.0.4

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.