BaselineWatch
58925 CVEs · 135 in KEV
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in
CVEs known58,925 New, 24 h777 Changed, 24 h927 In KEV135 Public exploit1,594 Match watchlist0

Vulnerabilities

All My stack Known exploited Public exploit Critical (9+) Likely exploited (EPSS ≥ 50%) Changed, 24 h New, 24 h Sort: risk modified published CVSS EPSS
CVECVSSEPSSVendor, productDescriptionModified
CVE-2026-78401 9.8 critical 1.0% ibm, security_verify_access, security_verify_access_container, verify_identity_access IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote unauthenticated attacker to execute arbitrary code on the system due to the deserialization of untrusted data. 10 Oct
CVE-2026-78406 9.8 critical 1.0% ibm, security_verify_access, security_verify_access_container, verify_identity_access IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote unauthenticated attacker to execute arbitrary code on the system due to the deserialization of untrusted data. 10 Oct
CVE-2026-16916 8.8 high 1.0% ibm, security_verify_access, security_verify_access_container, verify_identity_access IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to execute arbitrary code due to a protection mechanism failure. 10 Oct
CVE-2026-4101 9.8 critical 0.00% ibm, security_verify_access, security_verify_access_container, verify_identity_access IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 under certain load conditions could allow an attacker to bypass authentication mechanisms and gain unauthorized access to the application. Mon 26 Oct
CVE-2026-78388 8.8 high 0.00% ibm, security_verify_access, security_verify_access_container, verify_identity_access IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. 12 Oct
CVE-2026-19482 8.8 high 0.00% ibm, security_verify_access, security_verify_access_container, verify_identity_access IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of command arguments. 10 Oct
CVE-2026-18740 8.8 high 0.00% ibm, security_verify_access, security_verify_access_container, verify_identity_access IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to perform unauthorized actions due to argument injection. 10 Oct
CVE-2026-19493 7.5 high 0.00% ibm, security_verify_access, security_verify_access_container, verify_identity_access IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to perform an arbitrary file write due to path traversal. 12 Oct
CVE-2026-19491 7.5 high 0.00% ibm, security_verify_access, security_verify_access_container, verify_identity_access IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to bypass authentication due to improper authentication. 10 Oct
CVE-2026-11888 7.5 high 0.00% ibm, security_verify_access, security_verify_access_container, verify_identity_access IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to an information disclosure attack. 10 Oct
CVE-2026-16823 7.5 high 0.00% ibm, security_verify_access, security_verify_access_container, verify_identity_access IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to bypass security restrictions due to improper authentication. 10 Oct
CVE-2026-11930 7.5 high 0.00% ibm, security_verify_access, security_verify_access_container, verify_identity_access IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 may not enforce authorization correctly for some web servers. 9 Oct
CVE-2026-19498 7.5 high 0.00% ibm, security_verify_access, security_verify_access_container, verify_identity_access IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to cause a denial of service due to uncontrolled recursion. 9 Oct
CVE-2026-1345 7.3 high 0.00% ibm, security_verify_access, security_verify_access_container, verify_identity_access IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 could allow an unauthenticated user to execute arbitrary commands as lower user privileges on the system due to improper validation of user supplied input. Mon 26 Oct
CVE-2026-12109 7.2 high 0.00% ibm, security_verify_access, security_verify_access_container, verify_identity_access IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an attacker with administrative privileges and access to the local management interface to execute arbitrary code due to an unbounded write to a fixed-size stack buffer. 10 Oct
CVE-2026-5926 6.5 medium 0.00% ibm, security_verify_access, security_verify_access_container, verify_identity_access IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. Mon 26 Oct
CVE-2026-78399 6.5 medium 0.00% ibm, security_verify_access, security_verify_access_container, verify_identity_access IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an authenticated user to cause a denial of service using a specially crafted HTTP query due to improper allocation of system resources 12 Oct
CVE-2026-19494 6.5 medium 0.00% ibm, security_verify_access, security_verify_access_container, verify_identity_access IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication. 10 Oct
CVE-2026-19878 6.5 medium 0.00% ibm, security_verify_access, security_verify_access_container, verify_identity_access IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to bypass additional authentication workflow steps. 9 Oct
CVE-2026-17189 6.1 medium 0.00% ibm, security_verify_access, security_verify_access_container, verify_identity_access IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session 13 Oct
CVE-2026-4364 5.4 medium 0.00% ibm, security_verify_access, security_verify_access_container, verify_identity_access IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 allows certificate listings retrieved via a browser session to return a JSON payload while incorrectly specifying the response Content-Type as text/html. Because the content is delivered with an HTML MIME type, browsers may interpret the JSON data as executable script under certain conditions. This creates an opportunity for JavaScript injection, potentially leading to cross-site scripting (XSS). Mon 26 Oct
CVE-2026-16830 5.4 medium 0.00% ibm, security_verify_access, security_verify_access_container, verify_identity_access IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to modify data and cause a denial of service due to an SQL injection vulnerability. 12 Oct
CVE-2026-11936 5.4 medium 0.00% ibm, security_verify_access, security_verify_access_container, verify_identity_access IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 local management interface in certain configurations is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. 12 Oct
CVE-2026-78407 5.4 medium 0.00% ibm, security_verify_access, security_verify_access_container, verify_identity_access IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 are vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. 9 Oct
CVE-2026-1491 5.3 medium 0.00% ibm, security_verify_access, security_verify_access_container, verify_identity_access IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 IBM Security Verify could allow a remote attacker to access sensitive information due to an inconsistent interpretation of an HTTP request by a reverse proxy. Mon 26 Oct
CVE-2026-2862 5.3 medium 0.00% ibm, security_verify_access, security_verify_access_container, verify_identity_access IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 IBM Security Verify could allow a remote attacker to access sensitive information due to an inconsistent interpretation of an HTTP request by a reverse proxy. Mon 26 Oct
CVE-2026-12091 5.3 medium 0.00% ibm, security_verify_access, security_verify_access_container, verify_identity_access IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a denial of service due to a heap-based out-of-bounds read. A remote attacker could send a specially crafted request that causes a limited out‑of‑bounds memory read. 12 Oct
CVE-2026-11939 5.3 medium 0.00% ibm, security_verify_access, security_verify_access_container, verify_identity_access IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 may be vulnerable to audit log forgery. 12 Oct
CVE-2026-2475 4.7 medium 0.00% ibm, security_verify_access, security_verify_access_container, verify_identity_access IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 could allow a remote attacker to conduct phishing attacks, caused by an open redirect vulnerability. An attacker could exploit this vulnerability using a specially crafted request to redirect a victim to arbitrary Web sites. Sun 25 Oct

29 of 29

Download these 29 as CSV · subscribe to this list.

EPSS scores: 2026-10-29. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.