{"id":"CVE-2026-109126","title":"IBM Verify Identity Access and IBM Security Verify Access Hard-coded Credentials","summary":"IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appliance could allow a physically proximate attacker to gain elevated privileges due to the use of hard-coded credentials.","severity":"high","cvss":8.8,"cvssVector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvssSource":"cna","cwe":["CWE-798"],"vendor":"IBM","product":"Verify Identity Access","affected":["verify_identity_access 11.0.3.1","security_verify_access 10.0.9.3"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-10-20T14:34:59.420118Z"},"published":"2026-10-19","updated":"2026-10-20","sourceUpdated":"2026-10-20T14:35:23.500Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-109126","references":[{"url":"https://www.ibm.com/support/pages/node/7292606"}],"tags":["cve.org"],"epss":0.00178,"epssPercentile":0.0695,"ingestedAt":"2026-10-20T00:48:34.206Z","slug":"CVE-2026-109126","body":"## Overview\n\nIBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appliance could allow a physically proximate attacker to gain elevated privileges due to the use of hard-coded credentials.\n\n## Affected\n\n- `verify_identity_access 11.0.3.1`\n- `security_verify_access 10.0.9.3`\n\n## Remediation\n\nIBM encourages customers to update their systems promptly.\n\n\n\n\n\n\n\nAppliance:\n\n\n\nAffected Products\n\n\n\nFix availability\n\n\n\nIBM Verify Identity Access\n\n\n\n Download IBM Verify Identity Access v11.0.3.2 https://www.ibm.com/support/fixcentral/swg/selectFix \n\n\n\nIBM Security Verify Access\n\n\n\n Download IBM Security Verify Access v10.0.9.4 https://www.ibm.com/support/fixcentral/swg/selectFixes","depth":"twilight","depthScore":48,"depthScoreParts":{"impact":48.4,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}