CVE-2026-1346

critical · 9.3

IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 could allow a locally authenticated user to escalate their privileges to root due to execution with unnecessary privileges than required.

9.3

CVSS

0.2%

EPSS (exploit prob.)

14th

EPSS percentile

2026-04-08

Published

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weaknesses

CWE-250

Affected products

Vendor	Product	Affected versions
ibm	security_verify_access	>= 10.0.0, <= 10.0.9.1
ibm	security_verify_access_container	>= 10.0.0.0, <= 10.0.9.1
ibm	verify_identity_access	>= 11.0.0.0, <= 11.0.2.0
ibm	verify_identity_access_container	>= 11.0.0.0, <= 11.0.2.0

Check a specific version with /api/v1/cve/match.

References

https://www.ibm.com/support/pages/node/7268253

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-1346