CVE-2026-12101

8.1 highEPSS 0.4%

High (8.1). EPSS 0.4% chance of exploitation in the next 30 days.

IBM Verify Identity Access could allow an administrator to execute additional commands they are not entitled to due to improper validation of user supplied requests.

Severity

CVSS 3.1

8.1 high

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 31% of CVEs (scores of 2026-10-31)
CWE: CWE-289
Published: 2026-09-15
Modified: 2026-09-20
Record from: the NVD, synced 2026-10-19

References

https://www.ibm.com/support/pages/node/7286188

Check your stack JSON