CVE-2026-8861 MEDIUM

CVE-2026-8861: Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

Vendor Ibm
Product Verify Identity Access
Weakness CWE-209 · Error message info leak
Published July 17, 2026
Last update July 20, 2026
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

IBM Security Verify could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.  This information could be used in further attacks against the system.

Key dates

02Disclosure timeline

July 17, 2026 CVE published
July 20, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-13539 AForms Eats <= 1.3.1 - Unauthenticated Full Path Disclosure CVE-2024-13540 WooODT Lite – Delivery & pickup date time location for WooCommerce <= 2.5.1 - Unauthenticated Full Path Dsiclosure CVE-2025-24552 WordPress Paytium plugin <= 4.4.11 - Full Path Disclosure (FPD) vulnerability CVE-2024-13535 Actionwear products sync <= 2.3.2 - Unauthenticated Full Patch Disclosure CVE-2024-50512 WordPress Posti Shipping plugin <= 3.10.2 - Full Path Disclosure (FPD) vulnerability