PT-2026-31053 · Ibm · Ibm Verify Identity Access Container+3

Published 2026-03-31 · Updated 2026-04-08 · CVE-2026-1343

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM Verify Identity Access Container versions 11.0 through 11.0.2 IBM Security Verify Access Container versions 10.0 through 10.0.9.1 IBM Verify Identity Access versions 11.0 through 11.0.2 IBM Security Verify Access versions 10.0 through 10.0.9.1

Description The software allows an attacker to contact internal authentication endpoints that are protected by the Reverse Proxy.

Recommendations Update IBM Verify Identity Access Container to a version later than 11.0.2. Update IBM Security Verify Access Container to a version later than 10.0.9.1. Update IBM Verify Identity Access to a version later than 11.0.2. Update IBM Security Verify Access to a version later than 10.0.9.1.

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

BDU:2026-05275

CVE-2026-1343

Affected Products

Ibm Security Verify Access

Ibm Security Verify Access Container

Verify Identity Access

Ibm Verify Identity Access Container

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-1343 · Security Note
• https://bdu.fstec.ru/vul/2026-05275 · Security Note
• https://ibm.com/support/pages/node/7268253 · Patch, Vendor Advisory
• https://twitter.com/CVEnew/status/2041711837499290063 · Twitter Post
• https://twitter.com/CVEarity/status/2041767048431464459 · Twitter Post