Reported by 4 outlets
Multiple IBM Verify Access vulnerabilities expose systems to remote attacks
Why this score
- Breadth
- 2.00 / 2.0 · 4 sources
- Authority
- 1.00 / 2.0 · best outlet weight
- Severity
- 4.50 / 5.0 · CVSS + content signals
- Velocity
- 0.50 / 2.0 · updates in 48h
- Pickup speed
- 0.59 / 0.6 · time to second source
- Recency
- × 0.35 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 3.0 / 10 = base × recency + community
Desk analysis
IBM fixed 22 vulnerabilities in Verify Identity Access and Security Verify Access, with two critical unauthenticated deserialization RCE flaws (CVE-2026-78401 and CVE-2026-78406) at CVSS 9.8, plus additional high-severity CVEs including CVE-2026-16823 and CVE-2026-194. Five patches reach CVSS 9.0 or higher. The advisory affects versions currently deployed and requires immediate patching; unauthenticated remote code execution is the worst-case exposure for identity access platforms. The event set comes from securityonline.info, all-about-security.de, and threataft.com reports, all referencing the same IBM advisory batch.
Timeline
-
original reporting
Multiple IBM Verify Access vulnerabilities expose systems to remote attacks. Update your software now to block these critical security flaws
securityonline.info · 5d ago · October 9th, 2026
Multiple IBM Verify Access vulnerabilities expose systems to remote attacks. Update your software now to block these critical security flaws
via Mastodon https://securityonline.info/ibm-verify-access-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social
-
update from threataft.com
🔴 IBM Verify Access — 7 CVEs, peak CVSS 9.8 CVE-2026-78401 / CVE-2026-78406 — unauth deserialization RCE (9.8) CVE-2026-16823 / CVE-2026-194
threataft.com · 5d ago · October 9th, 2026
🔴 IBM Verify Access — 7 CVEs, peak CVSS 9.8 CVE-2026-78401 / CVE-2026-78406 — unauth deserialization RCE (9.8) CVE-2026-16823 / CVE-2026-194
via Mastodon https://threataft.com/articles/ibm-verify-access-mass-disclosure-cve-2026-78401-78406
-
update from www.all-about-security.de
IBM Verify Access: Patches close security gaps (five with CVSS >= 9.0, two RCE)
www.all-about-security.de · 5d ago · October 9th, 2026
IBM Verify Access: Patches close security gaps. Five reach a CVSS base score of 9.0 or higher, including two cases of code execution. via Mastodon https://www.all-about-security.de/ibm-verify-access-patches-schliessen-sicherheitsluecken/
-
update from cyberupdates365.com
IBM Verify Access: 22 Flaws Fixed, 2 Critical RCEs IBM has fixed 22 vulnerabilities in Verify Identity Access and Security Verify Access, in
cyberupdates365.com · 1d ago · October 12th, 2026
IBM Verify Access: 22 Flaws Fixed, 2 Critical RCEs IBM has fixed 22 vulnerabilities in Verify Identity Access and Security Verify Access, in
via Mastodon https://cyberupdates365.com/ibm-verify-access-22-vulnerabilities/