EUVD-2026-57541
GHSA-f754-w544-fwgm
Severity by source
AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:H
PR:H confirmed by admin credential requirement for management interface; S:C reflects IAM platform downstream impact; I:N as no integrity impact is described in the vulnerability.
Primary rating from Vendor (us).
CVSS VectorVendor: us
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:H
Lifecycle Timeline
2DescriptionCVE.org
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 contains a format string injection vulnerability in the management interface that allows attackers to cause denial of service and information disclosure by crafting a malicious HTTP request.
AnalysisAI
Format string injection in IBM Security Verify Access (10.0-10.0.9.2) and IBM Verify Identity Access (11.0-11.0.3, including container deployments) enables authenticated administrative attackers to send crafted HTTP requests to the management interface, triggering uncontrolled format string processing. Successful exploitation produces high confidentiality impact through stack memory disclosure and high availability impact through service crashes, with CVSS scope change indicating potential downstream effect on identity services beyond the management component. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires possession of high-privilege (administrator-level) credentials to the IBM Verify Access management interface, confirmed by PR:H in the CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C vector. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 8.7 score is driven by network accessibility (AV:N), low attack complexity (AC:L), and scope change (S:C) with dual high-impact outcomes (C:H, A:H) - but PR:H meaningfully constrains real-world exploitation to actors who already hold administrative credentials. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker who has obtained or compromised high-privilege administrator credentials to the IBM Verify Access management interface crafts an HTTP request where a parameter - such as a search field, configuration value, or log entry input - contains format string specifiers like %s, %x, or %n. When the management interface processes this request and passes the attacker-controlled value directly as a format string to a vulnerable format function, the process reads from or writes to unintended memory locations. … |
| Remediation | Consult the IBM vendor advisory at https://www.ibm.com/support/pages/node/7283079 for confirmed patch availability and specific fixed version numbers, which were not included in the available source intelligence and must be retrieved directly from IBM. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Audit deployed versions of both IBM Security Verify Access and IBM Verify Identity Access to identify affected instances; immediately restrict management interface access to a minimal set of essential administrative personnel and implement network segmentation to limit management interface exposure. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Security Verify Access
View allIBM Security Verify Access 10.0.0 through 10.0.8 OIDC Provider could allow a remote authenticated attacker to conduct ph
IBM Security Verify Access 10.0.0 through 10.0.7 and IBM Application Gateway 20.01 through 24.03 could allow a remote at
IBM Security Verify Access Appliance 10.0.0 through 10.0.8 contains hard-coded credentials, such as a password or crypto
IBM Security Verify Access Appliance 10.0.0 through 10.0.8 contains hard-coded credentials, such as a password or crypto
IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an unauthorized public Oauth client
IBM Security Verify Access Appliance 10.0.0 through 10.0.8 could allow a remote authenticated attacker to execute arbitr
IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security V
Authentication bypass in IBM Security Verify Access and IBM Verify Identity Access exposes protected resources to unauth
Privilege escalation in IBM Security Verify Access and IBM Verify Identity Access allows an authenticated low-privilege
IBM Security Verify Access Appliance 10.0.0 through 10.0.7 could allow a malicious actor to conduct a man in the middle
IBM Security Verify Access Appliance 10.0.0 through 10.0.7 could allow a malicious actor to conduct a man in the middle
IBM Security Verify Access Docker 10.0.0 could allow a user to impersonate another user on the system. Rated high severi
Same weakness CWE-134 – Use of Externally-Controlled Format String
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today