CVE-2026-78399

Published: Oct 8, 2026Modified: Oct 12, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: psirt@us.ibm.com (Secondary)

Description

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an authenticated user to cause a denial of service using a specially crafted HTTP query due to improper allocation of system resources

Affected (4)

Products: Ibm: Security Verify Access, Security Verify Access Container, Verify Identity Access, Verify Identity Access Container

Ibm

4 products

Security Verify Access

Security Verify Access Container

Verify Identity Access

Verify Identity Access Container

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Ibm Security Verify Access	10.0.0 ≤ version < 10.0.9.3
Ibm Security Verify Access Container	10.0.0.0 ≤ version ≤ 10.0.9.2
Ibm Verify Identity Access	11.0 ≤ version < 11.0.3.1
Ibm Verify Identity Access Container	11.0.0.0 ≤ version ≤ 11.0.3.0

Related CWEs

CWE-770

Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

References (1)

https://www.ibm.com/support/pages/node/7291628

Source: psirt@us.ibm.com

Vendor Advisory

Timeline

No history available yet.