Signals
Back to database
Soon65Medium6.5VulnerabilityCVE-2026-78399No patch link observed

CVE-2026-78399 — IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an authenticated user to cause a de…

Published Oct 8, 2026, 09:18 PM UTCIngested 38m agoSource NVD(cve-db)CVE-2026-78399

Description

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an authenticated user to cause a denial of service using a specially crafted HTTP query due to improper allocation of system resources

CVSS v3.1 base metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
6.5

Medium severity

Band computed from the CVSS base score, not the source's own label — so it means the same thing across every feed.

AV

Network

Attack Vector

AC

Low

Attack Complexity

PR

Low

Privileges Required

UI

None

User Interaction

S

Unchanged

Scope

C

None

Confidentiality

I

None

Integrity

A

High

Availability

References

Related threats

same CWE or vendor
Medium

CVE-2026-107386 — amqp091-go is a Go AMQP 0.9.1 client.

CVE-2026-107386 · 4h ago

Medium

CVE-2026-107379 — savg-sanitizer is a PHP SVG/XML sanitizer.

CVE-2026-107379 · 5h ago

Medium

CVE-2026-107294 — Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.

CVE-2026-107294 · 6h ago

Medium

CVE-2026-107586 — Uncontrolled eviction in the browser session table of the REST API in Progressive Robot hMailServer 6.2.28 through 6.3.5 allows a remote authentica…

CVE-2026-107586 · 8h ago

Medium

CVE-2026-107585 — Uncontrolled eviction in the pending sign-in tables of the REST API in Progressive Robot hMailServer 6.3.4 and 6.3.5 allows a remote unauthenticate…

CVE-2026-107585 · 8h ago

High

CVE-2026-16176 — IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a re…

CVE-2026-16176 · 10h ago