IBM Security Verify Directory 10.0.0 Through 10.0.4 - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/ibm-security-verify-directory-10.0.0-through-10.0.4/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioSun, 08 Nov 2026 20:56:37 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgIBM Security Verify Directory: Session Fixation (CVE-2026-8639)https://feed.craftedsignal.io/briefs/2026-11-ibm-verify-directory-session-fixation/Sun, 08 Nov 2026 20:56:37 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-ibm-verify-directory-session-fixation/IBM Security Verify Directory is affected by a session fixation vulnerability (CVE-2026-8639) that allows an attacker with low privileges to hijack an authenticated management console session.<p>IBM Security Verify Directory 10.0.0 through 10.0.4 and 11.0.0 are vulnerable to session fixation. An attacker with low privileges can establish a session and, after the victim authenticates, hijack the authenticated session to gain unauthorized access to the directory management console. A public proof-of-concept (PoC) exploit for this vulnerability is available on Sploitus.</p> highadvisory