Loading story…
IBM disclosed two high-severity vulnerabilities in IBM Verify Identity Access and IBM Security Verify Access that affect both containerized and non-containerized deployments. CVE-2026-1342 is classified as CWE-829 and allows execution of malicious scripts from outside the product's control sphere, while CVE-2026-1346 is a CWE-250 flaw that can let a locally authenticated user escalate privileges to root because the software runs with more privileges than necessary.
The affected products and versions listed for CVE-2026-1346 include IBM Verify Identity Access Container 11.0 through 11.0.2, IBM Security Verify Access Container 10.0 through 10.0.9.1, IBM Verify Identity Access 11.0 through 11.0.2, and IBM Security Verify Access 10.0 through 10.0.9.1. IBM published advisories for both issues, and the reported CVSS v3.1 metrics indicate significant risk, with CVE-2026-1346 carrying high impact across confidentiality, integrity, and availability and CVE-2026-1342 exposing systems to unauthorized script execution within affected environments.
See affected versions and whether adversaries are exploiting it.
2 events from the most recent confirmed update back to the earliest known activity.
IBM disclosed multiple additional vulnerabilities in IBM Verify Identity Access and IBM Security Verify Access, including HTTP request smuggling flaws CVE-2026-2862 and CVE-2026-1491, plus issues such as buffer overflow, command injection, authentication bypass, SSRF, and XSS. IBM urged customers to upgrade to IBM Verify Identity Access v11.0.2 IF1, IBM Security Verify Access v10.0.9.1 IF1, and updated container images, stating no workarounds were available.
IBM published advisories for two vulnerabilities affecting IBM Verify Identity Access and IBM Security Verify Access, including containerized and non-containerized versions. CVE-2026-1342 allows execution of malicious scripts by a locally authenticated user, while CVE-2026-1346 allows local privilege escalation to root due to excessive privileges.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
3 references tracked. Mallory keeps watching after this page renders.
cybersecuritynews.com
Open sourcecvefeed.io
Open sourcecvefeed.io
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
IBM disclosed multiple high-severity vulnerabilities affecting **WebSphere** and **webMethods Integration Server**, exposing enterprise middleware environments to remote compromise. In WebSphere, the reported issues include remote code execution flaws tracked as `CVE-2026-9311`, `CVE-2026-9330`, and `CVE-2026-9319`, alongside an authentication bypass and identity spoofing issue, `CVE-2026-8644`. Affected deployments include traditional WebSphere versions **9.0** and **8.5**, with IBM issuing interim fixes through specific APARs and urging administrators to verify configurations and apply patches quickly. A separate IBM advisory covers **webMethods Integration Server** `CVE-2025-36072`, a deserialization-based remote code execution flaw that can be exploited by an authenticated attacker with service execution privileges through internal APIs or protocols such as `IDataBin`. The vulnerability affects versions **10.11** through `10.11_Core_Fix22`, **10.15** through `10.15_Core_Fix22`, and **11.1** through `11.1_Core_Fix6` if they have not received the latest core fixes. Successful exploitation could allow arbitrary code execution in the Integration Server process, enabling lateral movement, persistence, and data exfiltration across business-critical systems.
Jun 29, 2026
IBM disclosed several security issues affecting products across its portfolio, including **IBM Cloud Databases for PostgreSQL**, **WebSphere Application Server**, **Liberty**, **IBM HTTP Server**, and **IBM Security Guardium**. The referenced advisories indicate exposure to widely tracked vulnerabilities such as the OpenSSL certificate parsing flaws `CVE-2022-3786` and `CVE-2022-3602`, alongside a Guardium command execution issue tracked as `CVE-2023-35893`. The notices show IBM assessing and publishing product-specific impact information through support bulletins and X-Force Exchange reporting, with Guardium highlighted for command execution risk and other enterprise offerings reviewed for inherited third-party component exposure. The disclosures underscore the need for organizations using affected IBM platforms to verify product impact, review vendor bulletins, and apply available fixes or mitigations to reduce the risk of exploitation in database, application server, web server, and data security environments.
Jul 12, 2026
IBM disclosed two vulnerabilities in traditional **IBM WebSphere Application Server** affecting versions **9.0** and **8.5**, led by **CVE-2026-14512**, a **pre-authentication unsafe deserialization** flaw rated **CVSS 9.8**. The issue could allow a remote attacker to **bypass authentication** or achieve **arbitrary code execution** without user interaction, creating a high-risk path to full compromise of exposed WebSphere environments. IBM also identified **CVE-2026-14528**, a **CVSS 7.4** flaw that could expose sensitive information through insertion into log files. The company directed customers to apply the interim fix for **APAR PH72166** or upgrade to **Fix Pack 9.0.5.29+** for WebSphere 9.0 and **Fix Pack 8.5.5.31+** for WebSphere 8.5, and said **no workarounds or mitigations are available**.
Jul 29, 2026