CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-19491 — IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access ...

·Source: NIST NVD

Updated:

Executive Summary

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to bypass authentication due to improper authentication.

Analysis

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to bypass authentication due to improper authentication. CVSS Score: 9.1. Published: 2026-10-08T21:17:57.070.

Indicators of Compromise (2)

CVE (1)
CVE-2026-19491
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Oct 8, 2026. Verified by: NIST.

Related Threats

CRITICALVulnerabilityNEW

NVD CRITICAL: CVE-2026-101420 — Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS...

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. While the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact addi

CVE-2026-101420
NIST NVD
MEDIUMVulnerability

Tech Giants Block eMudhra Certificates Tied to 8 Compromised Keys

Google, Mozilla, Apple, the Go project and others moved swiftly to block the affected certificates from the Indian CA, though it's unclear how the keys were compromised.

Dark Reading
CRITICALVulnerability

NVD CRITICAL: CVE-2026-9869 — A stack-based buffer overflow vulnerability exists in the boa formTR069Config fu...

A stack-based buffer overflow vulnerability exists in the boa formTR069Config functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.

CVE-2026-9869
NIST NVD