VulnSocial

CVE-2026-4101General(ibm / security_verify_access)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 under certain load conditions could allow an attacker to bypass authentication mechanisms and gain unauthorized access to the application.

ibm CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-287

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • security_verify_access
  • security_verify_access_container
  • verify_identity_access
  • verify_identity_access_container

Threat summary

  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 1 signal
  • General: 2 classified signals
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 2 mentions (2026-04-02); latest day: 1
  • 3 total mentions across 2 days

Affected systems

Vendors
ibm
Products
security_verify_accesssecurity_verify_access_containerverify_identity_accessverify_identity_access_container

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-04-02: 2Mentions · 2026-04-17: 1Technical Details · 2026-04-02: 104-0204-17
Signal classification2 categories
General
266.7%
Disclosure
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-04-022
Disclosure1General1
2026-04-171
General1
Full discourse3 posts
  • CERT-PY@CERTpy
    General

    ⚠️ Vulnerabilidades en productos IBM ❗ CVE-2026-4101 ❗ CVE-2026-1346 ❗ CVE-2026-1345 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-ibm-4/ https://t.co/SLpGtRBpi5

    Post summary

    The post enumerates three IBM-related CVEs and directs readers to an external link for more information, but it provides no details on exploitation, patches, or technical characteristics.

    00020120
    6.7K followersView on X
  • CVE@CVEnew
    General

    CVE-2026-4101 IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0… https://www.cve.org/CVERecord?id=CVE-2026-4101

    Post summary

    The post merely references CVE‑2026‑4101 and links to its official CVE record, lacking any technical, exploit, or patch information.

    00000150
    56.9K followersView on X
  • The Hacker Wire@TheHackerWire
    Disclosure

    🟠 CVE-2026-4101 - High IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Veri... https://www.thehackerwire.com/vulnerability/CVE-2026-4101/ https://t.co/HkqHTRskti

    Post summary

    The post announces CVE-2026-4101 as a high‑severity flaw affecting several IBM Verify Access versions, but provides no PoC, exploit, patch, or evidence of active exploitation.

    0000071
    163 followersView on X
CPE platform detail4 entries

4 of 4 entries

PartVendorProductVersionTarget SWTarget HW
Appibmsecurity_verify_access---
Appibmsecurity_verify_access_container---
Appibmverify_identity_access---
Appibmverify_identity_access_container---

Explore more

Back to dashboardibm CVEssecurity_verify_access vulnerabilities