CVE-2026-7364: Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 and IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 could allow a remote attacker to conduct phishing attacks, caused by an open redirect vulnerability. An attacker could exploit this vulnerability using a specially crafted request to redirect a victim to arbitrary Web sites.
Other sources
IBM Verify Identity Access could allow a remote attacker to conduct phishing attacks, caused by an open redirect vulnerability. An attacker could exploit this vulnerability using a specially crafted request to redirect a victim to arbitrary Web sites.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Verify Identity Accessto a version that resolves this vulnerability.Fixed in 11.0.3 - Upgrade
Upgrade
IBM Security Verify Accessto a version that resolves this vulnerability.Fixed in 10.0.9.2
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7364?
The severity of CVE-2026-7364 is classified as low with a score of 3.1.
How do I fix CVE-2026-7364?
To fix CVE-2026-7364, ensure you update to the latest version of IBM Verify Identity Access and IBM Security Verify Access.
What systems are affected by CVE-2026-7364?
CVE-2026-7364 affects IBM Verify Identity Access versions 11.0 through 11.0.2 and IBM Security Verify Access versions 10.0 through 10.0.9.1.
What type of attacks can CVE-2026-7364 facilitate?
CVE-2026-7364 could allow a remote attacker to conduct phishing attacks.
Which containers are impacted by CVE-2026-7364?
CVE-2026-7364 impacts IBM Verify Identity Access Container versions 11.0 through 11.0.2 and IBM Security Verify Access Container versions 10.0 through 10.0.9.1.