CVE-2026-12005— Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
Possible ATT&CK Techniques 1AI
T1068 · Exploitation for Privilege EscalationAffected Version Matrix 4
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| IBM | Security Verify Access | 10.0≤ 10.0.9.2 | affected |
| IBM | Security Verify Access Container | 10.0≤ 10.0.9.2 | affected |
| IBM | Verify Identity Access | 11.0≤ 11.0.3 | affected |
| IBM | Verify Identity Access Container | 11.0≤ 11.0.3 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-12005
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
Source: CVE Program / CVE List V5
Vulnerability Description
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 contains a input validation vulnerability in the management interface that allows already privileged attackers to execute additional operations by crafting a malicious HTTP request.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| IBM | Security Verify Access | 10.0 ~ 10.0.9.2 | cpe:2.3:a:ibm:security_verify_access:10.0:*:*:*:*:*:*:* | |
| IBM | Verify Identity Access | 11.0 ~ 11.0.3 | cpe:2.3:a:ibm:verify_identity_access:11.0:*:*:*:*:*:*:* | |
| IBM | Verify Identity Access Container | 11.0 ~ 11.0.3 | cpe:2.3:a:ibm:verify_identity_access_container:11.0:*:*:*:*:*:*:* | |
| IBM | Security Verify Access Container | 10.0 ~ 10.0.9.2 | cpe:2.3:a:ibm:security_verify_access_container:10.0:*:*:*:*:*:*:* |
II. Public POCs for CVE-2026-12005
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-12005
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-12005 (1)
Same Patch Batch · IBM · 2026-08-12 · 68 CVEs total
| CVE-2024-27253 | 10.0 CRITICAL | IBM Engineering Requirements Management DOORS Next is impacted by vulnerability in Reviews |
| CVE-2026-16860 | 9.9 CRITICAL | IBM i is Affected By Remote Code Execution Vulnerability [] |
| CVE-2026-16956 | 9.8 CRITICAL | IBM Db2 Mirror for i is vulnerable to OS command injection [] |
| CVE-2026-17218 | 9.8 CRITICAL | IBM i is Affected By Remote Code Execution Vulnerability in Line Printer Daemon [] |
| CVE-2026-17083 | 9.8 CRITICAL | IBM i is Affected By Multiple Vulnerabilities in the Debug Server |
| CVE-2026-17276 | 9.6 CRITICAL | IBM i is Affected By Multiple Vulnerabilities in Navigator for i |
| CVE-2026-18099 | 8.9 HIGH | IBM i is Affected By Multiple Vulnerabilities in Navigator for i |
| CVE-2026-17110 | 8.8 HIGH | IBM i is Affected By Multiple Vulnerabilities in SQL |
| CVE-2026-18713 | 8.8 HIGH | IBM i is Affected By Multiple Vulnerabilities in Navigator for i |
| CVE-2026-17417 | 8.8 HIGH | IBM i is Affected By Remote Code Execution Vulnerabilities [, ] |
| CVE-2026-13361 | 8.8 HIGH | IBM Informix Server Vulnerability in SQL Interface Handler Could Allow Remote Code Executi |
| CVE-2026-17642 | 8.8 HIGH | IBM i is Affected By Remote Code Execution Vulnerabilities [, ] |
| CVE-2026-18683 | 8.8 HIGH | IBM i is Affected By privilege escalation in Navigator for i |
| CVE-2026-13105 | 8.8 HIGH | IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities |
| CVE-2026-18669 | 8.8 HIGH | IBM i is Affected By A Privilege Escalation Vulnerability [] |
| CVE-2026-17082 | 8.8 HIGH | IBM i is Affected By Multiple Vulnerabilities in the Debug Server |
| CVE-2026-16856 | 8.8 HIGH | IBM i is Affected By Multiple Vulnerabilities in Domain Name System |
| CVE-2026-16906 | 8.8 HIGH | IBM i is Affected By Multiple Vulnerabilities in Domain Name System |
| CVE-2026-18847 | 8.8 HIGH | IBM i is Affected By Multiple Vulnerabilities in Navigator for i |
| CVE-2026-12004 | 8.7 HIGH | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Ve |
Showing top 20 of 68 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Security Verify Access
- CVE-2026-11932
Security vulnerabilities have been found in IBM Verify Ident - CVE-2026-17616
Security vulnerabilities have been found in IBM Verify Ident - CVE-2026-12359
Security vulnerabilities have been found in IBM Verify Ident - CVE-2026-11923
Security vulnerabilities have been found in IBM Verify Ident - CVE-2026-12004
Security vulnerabilities have been found in IBM Verify Ident
Same vendor: IBM
- CVE-2026-19483
The following vulnerabilities that can affect IBM Storage Sc - CVE-2026-19297
Insufficient Authentication Brute Force Protection on Login - CVE-2026-18715
IBM i is Affected By Multiple Vulnerabilities in WebSphere A - CVE-2026-18671
IBM i is Affected By Multiple Vulnerabilities in NetServer - CVE-2026-18511
IBM i is Affected By Multiple Vulnerabilities in Java Secure
Same weakness: CWE-78
- CVE-2026-19771
Baicells EG3661M LuCI Web luci os command injection - CVE-2026-73667
OpenChoreo: Authenticated OS command injection via OpenChore - CVE-2026-73662
Authenticated FreePBX Music RCE via mpg123 and Asterisk Call - CVE-2026-73660
FreePBX: Authenticated TTS AGI Command Injection Through TTS - CVE-2026-73570
Zimbra<10.1.20 SNMP未授权远程代码执行漏洞
V. Comments for CVE-2026-12005
No comments yet