CVE-2026-12004

Name of the Vulnerable Software and Affected Versions IBM Security Verify Access versions 10.0 through 10.0.9.2 IBM Verify Identity Access versions 11.0 through 11.0.3 IBM Verify Identity Access Container versions 11.0 through 11.0.3

Description A format string injection exists in the management interface. This issue allows attackers to cause a denial of service and information disclosure by sending a specially crafted HTTP request. Format string injection occurs when an application improperly uses user-supplied input as the format string argument in certain functions, potentially allowing the attacker to read or write to memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.