{"id":"CVE-2026-13297","title":"IBM Verify Identity Access Advanced Access Control may be vulnerable to an information disclosure attack.","summary":"IBM Verify Identity Access Advanced Access Control may be vulnerable to an information disclosure attack.","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-1336"],"vendor":"IBM","product":"Verify Identity Access","affected":["verify_identity_access >= 11.0.0 <= 11.0.3 Interim Fix 001","security_verify_access >= 10.0.0 <= 10.0.9.2 Interim Fix 001","verify_identity_access_container >= 11.0.0 <= 11.0.3 Interim Fix 001","security_verify_access_container >= 10.0.0 <= 10.0.9.2 Interim Fix 001"],"published":"2026-09-04","updated":"2026-09-08","sourceUpdated":"2026-09-08T18:17:35.057","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-13297","references":[{"url":"https://www.ibm.com/support/pages/node/7286188","label":"psirt@us.ibm.com"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"partial","timestamp":"2026-09-08T17:34:18.482751Z"},"epss":0.00249,"epssPercentile":0.14402,"ingestedAt":"2026-09-08T15:33:26.962Z","slug":"CVE-2026-13297","body":"## Overview\n\nIBM Verify Identity Access Advanced Access Control may be vulnerable to an information disclosure attack.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":41.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":8163,"id":"CVE-2026-13297","ts":1788919965496,"field":"cvss","old":null,"new":"7.5"},{"seq":8162,"id":"CVE-2026-13297","ts":1788919965496,"field":"severity","old":"none","new":"high"},{"seq":7972,"id":"CVE-2026-13297","ts":1788919253379,"field":"cvss","old":"7.5","new":null},{"seq":7971,"id":"CVE-2026-13297","ts":1788919253379,"field":"severity","old":"high","new":"none"},{"seq":7781,"id":"CVE-2026-13297","ts":1788916326184,"field":"cvss","old":null,"new":"7.5"},{"seq":7780,"id":"CVE-2026-13297","ts":1788916326184,"field":"severity","old":"none","new":"high"},{"seq":7590,"id":"CVE-2026-13297","ts":1788915271027,"field":"cvss","old":"7.5","new":null},{"seq":7589,"id":"CVE-2026-13297","ts":1788915271027,"field":"severity","old":"high","new":"none"},{"seq":7399,"id":"CVE-2026-13297","ts":1788912685951,"field":"cvss","old":null,"new":"7.5"},{"seq":7398,"id":"CVE-2026-13297","ts":1788912685951,"field":"severity","old":"none","new":"high"},{"seq":7208,"id":"CVE-2026-13297","ts":1788911303343,"field":"cvss","old":"7.5","new":null},{"seq":7207,"id":"CVE-2026-13297","ts":1788911303343,"field":"severity","old":"high","new":"none"},{"seq":7015,"id":"CVE-2026-13297","ts":1788909054891,"field":"cvss","old":null,"new":"7.5"},{"seq":7014,"id":"CVE-2026-13297","ts":1788909054891,"field":"severity","old":"none","new":"high"},{"seq":6827,"id":"CVE-2026-13297","ts":1788907367649,"field":"cvss","old":"7.5","new":null},{"seq":6826,"id":"CVE-2026-13297","ts":1788907367649,"field":"severity","old":"high","new":"none"},{"seq":6635,"id":"CVE-2026-13297","ts":1788905422316,"field":"cvss","old":null,"new":"7.5"},{"seq":6634,"id":"CVE-2026-13297","ts":1788905422316,"field":"severity","old":"none","new":"high"},{"seq":6453,"id":"CVE-2026-13297","ts":1788903436112,"field":"cvss","old":"7.5","new":null},{"seq":6452,"id":"CVE-2026-13297","ts":1788903436112,"field":"severity","old":"high","new":"none"},{"seq":6249,"id":"CVE-2026-13297","ts":1788901790658,"field":"cvss","old":null,"new":"7.5"},{"seq":6248,"id":"CVE-2026-13297","ts":1788901790658,"field":"severity","old":"none","new":"high"},{"seq":6079,"id":"CVE-2026-13297","ts":1788899548834,"field":"cvss","old":"7.5","new":null},{"seq":6078,"id":"CVE-2026-13297","ts":1788899548834,"field":"severity","old":"high","new":"none"},{"seq":5896,"id":"CVE-2026-13297","ts":1788898145985,"field":"cvss","old":null,"new":"7.5"},{"seq":5895,"id":"CVE-2026-13297","ts":1788898145985,"field":"severity","old":"none","new":"high"},{"seq":5785,"id":"CVE-2026-13297","ts":1788895702963,"field":"cvss","old":"7.5","new":null},{"seq":5784,"id":"CVE-2026-13297","ts":1788895702963,"field":"severity","old":"high","new":"none"},{"seq":5665,"id":"CVE-2026-13297","ts":1788894520267,"field":"cvss","old":null,"new":"7.5"},{"seq":5664,"id":"CVE-2026-13297","ts":1788894520267,"field":"severity","old":"none","new":"high"},{"seq":5623,"id":"CVE-2026-13297","ts":1788891863846,"field":"cvss","old":"7.5","new":null},{"seq":5622,"id":"CVE-2026-13297","ts":1788891863846,"field":"severity","old":"high","new":"none"},{"seq":5607,"id":"CVE-2026-13297","ts":1788890891285,"field":"cvss","old":null,"new":"7.5"},{"seq":5606,"id":"CVE-2026-13297","ts":1788890891285,"field":"severity","old":"none","new":"high"}]}