CVE-2026-8861
EUVD-2026-4526817.07.2026, 20:17
IBM Security Verify could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| ibm | security_verify_access | 10.0.0 ≤ 𝑥 < 10.0.9.2 |
| ibm | security_verify_access_container | 10.0.0.0 ≤ 𝑥 ≤ 10.0.9.1 |
| ibm | verify_identity_access | 11.0 ≤ 𝑥 < 11.0.3 |
| ibm | verify_identity_access_container | 11.0.0.0 ≤ 𝑥 ≤ 11.0.2 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration