Skip to content
Sign in
4.7 Medium

CVE-2026-13277 IBM Verify Identity Access could allow a remote attacker to conduct phishing attacks, using an open redirect attack

Description

IBM Verify Identity Access could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim.

Affected products and versions

Product Affected versions Fixed in
Verify Identity Access 11.0 11.0.0 → latest No fix stated
Security Verify Access 10.0 10.0.0 → latest No fix stated
Verify Identity Access Container 11.0 11.0.0 → latest No fix stated
Security Verify Access Container 10.0 10.0.0 → latest No fix stated

Other CVEs of Verify Identity Access

The 59 CVEs of Verify Identity Access →
CVE-2026-109126 IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appliance could allow a physically proximate… 8.8 High CVE-2026-11888 IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to… 6.4 Medium CVE-2026-11930 IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 may not enforce… 5.9 Medium CVE-2026-11939 IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 may be vulnerable to… 2.7 Low
Track this CVE