{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-13276", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2026-06-24T21:38:43.379Z", "datePublished": "2026-09-14T20:12:38.623Z", "dateUpdated": "2026-09-14T20:12:38.623Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-09-14T20:12:38.623Z"}, "title": "Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-79", "description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", "type": "CWE"}]}], "affected": [{"vendor": "IBM", "product": "Verify Identity Access", "versions": [{"status": "affected", "version": "11.0.0", "lessThanOrEqual": "11.0.3 Interim Fix 001", "versionType": "semver"}], "cpes": ["cpe:2.3:a:ibm:verify_identity_access:11.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:verify_identity_access:11.0.3:interim_fix_001:*:*:*:*:*:*"]}, {"vendor": "IBM", "product": "Security Verify Access", "versions": [{"status": "affected", "version": "10.0.0", "lessThanOrEqual": "10.0.9.2 Interim Fix 001", "versionType": "semver"}], "cpes": ["cpe:2.3:a:ibm:security_verify_access:10.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:security_verify_access:10.0.9.2:interim_fix_001:*:*:*:*:*:*"]}, {"vendor": "IBM", "product": "Verify Identity Access Container", "versions": [{"status": "affected", "version": "11.0.0", "lessThanOrEqual": "11.0.3 Interim Fix 001", "versionType": "semver"}], "cpes": ["cpe:2.3:a:ibm:verify_identity_access_container:11.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:verify_identity_access_container:11.0.3:interim_fix_001:*:*:*:*:*:*"]}, {"vendor": "IBM", "product": "Security Verify Access Container", "versions": [{"status": "affected", "version": "10.0.0", "lessThanOrEqual": "10.0.9.2 Interim Fix 001", "versionType": "semver"}], "cpes": ["cpe:2.3:a:ibm:security_verify_access_container:10.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:security_verify_access_container:10.0.9.2:interim_fix_001:*:*:*:*:*:*"]}], "descriptions": [{"lang": "en", "value": "IBM Verify Identity Access 11.0.0 through 11.0.3 Interim Fix 001 and IBM Security Verify Access 10.0.0 through 10.0.9.2 Interim Fix 001 and IBM Verify Identity Access Container 11.0.0 through 11.0.3 Interim Fix 001 and IBM Security Verify Access Container 10.0.0 through 10.0.9.2 Interim Fix 001.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>IBM Verify Identity Access 11.0.0 through 11.0.3 Interim Fix 001 and IBM Security Verify Access 10.0.0 through 10.0.9.2 Interim Fix 001 and IBM Verify Identity Access Container 11.0.0 through 11.0.3 Interim Fix 001 and IBM Security Verify Access Container 10.0.0 through 10.0.9.2 Interim Fix 001.</p>"}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7286188", "tags": ["vendor-advisory", "patch"]}], "solutions": [{"lang": "en", "value": "IBM encourages customers to update their systems promptly.\n\n\n\n\n\n\n\nAppliance\n\n\n\nAffected Products\n\n\n\nFix availability\n\n\n\nIBM Verify Identity Access\n\n\n\n Download IBM Verify Identity Access v11.0.3 IF2 https://www.ibm.com/support/fixcentral/quickorder \n\n\n\nIBM Security Verify Access\n\n\n\n Download IBM Security Verify Access v10.0.9.2 IF2 https://www.ibm.com/support/fixcentral/quickorder \n\n\n\n\n\n\n\n\n\nContainer\n\n\n\n\n\n\n\n Container Download https://docs.verify.ibm.com/ibm-security-verify-access/docs/containers", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p><strong>IBM encourages customers to update their systems promptly.</strong></p><p></p><p><strong>Appliance</strong></p><div><table><thead><tr><td><p>Affected Products</p></td><td><p>Fix availability</p></td></tr><tr><td><p>IBM Verify Identity Access</p></td><td><p><a href=\"https://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FTivoli%2FIBM+Verify+Identity+Access&amp;fixids=11.0.3.0-ISS-IVIA-IF0002&amp;source=SAR\" rel=\"nofollow\">Download IBM Verify Identity Access v11.0.3 IF2</a></p></td></tr><tr><td><p>IBM Security Verify Access</p></td><td><p><a href=\"https://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FTivoli%2FIBM+Security+Verify+Access&amp;fixids=10.0.9.2-ISS-ISVA-IF0002&amp;source=SAR\" rel=\"nofollow\">Download IBM Security Verify Access v10.0.9.2 IF2</a></p></td></tr></thead></table></div><p></p><p><strong>Container</strong></p><p></p><p><a href=\"https://docs.verify.ibm.com/ibm-security-verify-access/docs/containers\" rel=\"nofollow\">Container Download</a></p>"}]}]}}}

{}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:ibm:verify_identity_access:11.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:verify_identity_access:11.0.3:interim_fix_001:*:*:*:*:*:*"], "product": "Verify Identity Access", "vendor": "IBM", "versions": [{"lessThanOrEqual": "11.0.3 Interim Fix 001", "status": "affected", "version": "11.0.0", "versionType": "semver"}]}, {"cpes": ["cpe:2.3:a:ibm:security_verify_access:10.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:security_verify_access:10.0.9.2:interim_fix_001:*:*:*:*:*:*"], "product": "Security Verify Access", "vendor": "IBM", "versions": [{"lessThanOrEqual": "10.0.9.2 Interim Fix 001", "status": "affected", "version": "10.0.0", "versionType": "semver"}]}, {"cpes": ["cpe:2.3:a:ibm:verify_identity_access_container:11.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:verify_identity_access_container:11.0.3:interim_fix_001:*:*:*:*:*:*"], "product": "Verify Identity Access Container", "vendor": "IBM", "versions": [{"lessThanOrEqual": "11.0.3 Interim Fix 001", "status": "affected", "version": "11.0.0", "versionType": "semver"}]}, {"cpes": ["cpe:2.3:a:ibm:security_verify_access_container:10.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:security_verify_access_container:10.0.9.2:interim_fix_001:*:*:*:*:*:*"], "product": "Security Verify Access Container", "vendor": "IBM", "versions": [{"lessThanOrEqual": "10.0.9.2 Interim Fix 001", "status": "affected", "version": "10.0.0", "versionType": "semver"}]}], "source": "psirt@us.ibm.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "IBM Verify Identity Access 11.0.0 through 11.0.3 Interim Fix 001 and IBM Security Verify Access 10.0.0 through 10.0.9.2 Interim Fix 001 and IBM Verify Identity Access Container 11.0.0 through 11.0.3 Interim Fix 001 and IBM Security Verify Access Container 10.0.0 through 10.0.9.2 Interim Fix 001."}], "id": "CVE-2026-13276", "lastModified": "2026-09-14T21:17:01.557", "metrics": {}, "published": "2026-09-14T21:17:01.557", "references": [{"source": "psirt@us.ibm.com", "url": "https://www.ibm.com/support/pages/node/7286188"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Received", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "psirt@us.ibm.com", "type": "Primary"}]}

{}

{}