CVE-2026-1342 - Vulnerability Analysis

Overview

IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 contain a stored XSS caused by execution of malicious scripts from outside the control sphere, letting locally authenticated users execute scripts.

Severity & Score

Impact

Locally authenticated users can execute malicious scripts, potentially leading to session hijacking or privilege escalation.

Mitigation

Update to the latest available version beyond 11.0.2 for Verify Identity Access and 10.0.9.1 for Security Verify Access.

References

• https://www.ibm.com/support/pages/node/7268253

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner