CVE-2026-8861

Published: Jul 17, 2026Modified: Aug 11, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

IBM Security Verify could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.

Affected (4)

Products: Ibm: Security Verify Access, Security Verify Access Container, Verify Identity Access, Verify Identity Access Container

Ibm

4 products

Security Verify Access

Security Verify Access Container

Verify Identity Access

Verify Identity Access Container

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Ibm Security Verify Access	From 10.0.0 to 10.0.9.2
Ibm Security Verify Access Container	From 10.0.0.0 to 10.0.9.1
Ibm Verify Identity Access	From 11.0 to 11.0.3
Ibm Verify Identity Access Container	From 11.0.0.0 to 11.0.2

Related CWEs

CWE-209

Generation of Error Message Containing Sensitive Information

The product generates an error message that includes sensitive information about its environment, users, or associated data.

References (1)

https://www.ibm.com/support/pages/node/7279510

Source: psirt@us.ibm.com

Vendor Advisory

Timeline

No history available yet.