medium5.3
CVE-2026-8861
IBM Security Verify could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.
Impact
IBM Security Verify could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Security Verify Access | from 10.0.0 before 10.0.9.2 |
| Ibm | Security Verify Access Container | from 10.0.0.0 through 10.0.9.1 |
| Ibm | Verify Identity Access | from 11.0 before 11.0.3 |
| Ibm | Verify Identity Access Container | from 11.0.0.0 through 11.0.2 |