Skip to main content

Security Verify Access CVE-2026-13260

| EUVDEUVD-2026-78080
Allocation of Resources Without Limits or Throttling (CWE-770)
2026-09-14 ibm GHSA-cvqh-9j59-vmc5

Lifecycle Timeline

1
CVE Published
Sep 14, 2026 - 20:17 cve.org
UNKNOWN (no severity yet)

DescriptionCVE.org

IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources.

Analysis

IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources.

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts

Free forever · No credit card required

Threat intelligence, references, and detailed analysis are available after sign-in.

CVE-2024-35133 HIGH POC
8.2 Aug 29

IBM Security Verify Access 10.0.0 through 10.0.8 OIDC Provider could allow a remote authenticated attacker to conduct ph

CVE-2024-28787 CRITICAL
10.0 Apr 04

IBM Security Verify Access 10.0.0 through 10.0.7 and IBM Application Gateway 20.01 through 24.03 could allow a remote at

CVE-2024-49806 CRITICAL
9.8 Nov 29

IBM Security Verify Access Appliance 10.0.0 through 10.0.8 contains hard-coded credentials, such as a password or crypto

CVE-2024-49805 CRITICAL
9.8 Nov 29

IBM Security Verify Access Appliance 10.0.0 through 10.0.8 contains hard-coded credentials, such as a password or crypto

CVE-2020-4499 CRITICAL
9.8 Oct 15

IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an unauthorized public Oauth client

CVE-2024-49803 HIGH
8.8 Nov 29

IBM Security Verify Access Appliance 10.0.0 through 10.0.8 could allow a remote authenticated attacker to execute arbitr

CVE-2026-12004 HIGH
8.7 Aug 12

Format string injection in IBM Security Verify Access (10.0-10.0.9.2) and IBM Verify Identity Access (11.0-11.0.3, inclu

CVE-2023-31003 HIGH
8.4 Jan 11

IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security V

CVE-2026-12359 HIGH
8.1 Aug 12

Authentication bypass in IBM Security Verify Access and IBM Verify Identity Access exposes protected resources to unauth

CVE-2026-13267 HIGH
8.1 Aug 12

Privilege escalation in IBM Security Verify Access and IBM Verify Identity Access allows an authenticated low-privilege

CVE-2024-31872 HIGH
8.1 Apr 10

IBM Security Verify Access Appliance 10.0.0 through 10.0.7 could allow a malicious actor to conduct a man in the middle

CVE-2024-31871 HIGH
8.1 Apr 10

IBM Security Verify Access Appliance 10.0.0 through 10.0.7 could allow a malicious actor to conduct a man in the middle

Share

CVE-2026-13260 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy