CVE-2026-11927

6.5 mediumEPSS 0.3%

Medium (6.5). EPSS 0.3% chance of exploitation in the next 30 days.

IBM Security Verify Identity Access reverse proxy may allow parameters to be injected in requests to third party services.

Severity

6.5 medium

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 20% of CVEs (scores of 2026-10-31)
CWE: CWE-74
Published: 2026-09-15
Modified: 2026-09-20
Record from: the NVD, synced 2026-10-19