IBM Verify Identity Access 11.0.3.1 & Verify Access 10.0.9.3 Hardcoded creds
CVE-2026-109126 Published on October 19, 2026

IBM Verify Identity Access and IBM Security Verify Access Hard-coded Credentials
IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appliance could allow a physically proximate attacker to gain elevated privileges due to the use of hard-coded credentials.

Vendor Advisory NVD

Vulnerability Analysis

Exploitation:
NONE
Automatable:
NO
Technical Impact:
TOTAL
Attack Vector:
ADJACENT_NETWORK
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH

Weakness Type

Use of Hard-coded Credentials

The software contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.


Products Associated with CVE-2026-109126

stack.watch emails you whenever new vulnerabilities are published in IBM Verify Identity Access or IBM Security Verify Access. Just hit a watch button to start following.

IBM Verify Identity Access
IBM Security Verify Access

Affected Versions

IBM Verify Identity Access: IBM Security Verify Access: