HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-78388 — IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access ...

·Source: NIST NVD

Updated:

Executive Summary

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

Analysis

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. CVSS Score: 4.3. Published: 2026-10-08T21:18:02.727.

Indicators of Compromise (2)

CVE (1)
CVE-2026-78388
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Oct 8, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

Sustainable Finance Live: Fighting food poverty and financing pensions

In the afternoon panel session at Finextra’s Sustainable Finance Live conference 2026, ‘From Field to Estate to Thriving Community’, speakers highlighted how community banking can empower local food vendors and fight food poverty.

Finextra
CRITICALVulnerabilityNEW

NVD CRITICAL: CVE-2026-113703 — SuggestArr before 3.0.0 contains an authentication bypass vulnerability in its l...

SuggestArr before 3.0.0 contains an authentication bypass vulnerability in its local_bypass authentication mode where enforce_authentication() in api_service/auth/middleware.py trusts the client-controlled request.remote_addr value, which is derived from the spoofable X-Forwarded-For header due to ProxyFix(x_for=1) configuration in api_service/app.py. Attackers can send a request with X-Forwarded-

CVE-2026-113703
NIST NVD
CRITICALVulnerabilityNEW

NVD CRITICAL: CVE-2026-113678 — Froxlor before 2.3.15 contains a symlink following vulnerability in Statistics::...

Froxlor before 2.3.15 contains a symlink following vulnerability in Statistics::makeChownWithNewStats that allows authenticated customers to take ownership of arbitrary host directories by abusing the root-run traffic cron. Attackers can replace the goaccess statistics directory in their document root with a symlink, causing chown -R to hand root-owned trees to them and enabling root escalation.

CVE-2026-113678
NIST NVD