{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/security-verify-access-10.0.9.3/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ibm:verify_identity_access:11.0.3.1:*:*:*:*:*:*:*","cpe:2.3:a:ibm:security_verify_access:10.0.9.3:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-109126"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Verify Identity Access (11.0.3.1)","Security Verify Access (10.0.9.3)"],"_cs_severities":["high"],"_cs_tags":["privilege-escalation","identity-management","hardware"],"_cs_type":"advisory","_cs_vendors":["IBM"],"content_html":"\u003cp\u003eIBM has identified a critical security vulnerability, CVE-2026-109126, affecting IBM Verify Identity Access version 11.0.3.1 and IBM Security Verify Access version 10.0.9.3. The vulnerability stems from the inclusion of hard-coded credentials within the appliance firmware. An attacker with physical access to the device can leverage these credentials to bypass authentication mechanisms and attain administrative-level privileges on the target appliance. This represents a significant risk for organizations managing these identity and access management solutions in physical data centers or branch locations. Defenders should note that while this attack requires physical proximity, it provides full control over the identity appliance, potentially allowing for the modification of authentication policies, the creation of unauthorized accounts, or the extraction of sensitive identity data.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation of this vulnerability grants an unauthorized attacker administrative control over the target appliance. This can lead to total compromise of the identity and access management environment, potentially impacting downstream integrated systems that rely on these appliances for authentication and authorization. Given the high CVSS score of 8.8, immediate remediation is required for all affected deployments.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003ePrioritize the identification of all IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 instances within the environment. Apply the latest security patches provided by IBM to remove the hard-coded credentials. Because the attack requires physical access, ensure physical security controls for data centers and server rooms are audited and restricted to authorized personnel only.\u003c/p\u003e\n","date_modified":"2026-10-20T00:31:02Z","date_published":"2026-10-20T00:31:02Z","id":"https://feed.craftedsignal.io/briefs/2026-10-ibm-verify-hardcoded-creds/","summary":"IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 contain hard-coded credentials that allow a physically proximate attacker to gain elevated administrative privileges.","title":"Privilege Escalation in IBM Verify Identity and Security Access via Hard-coded Credentials","url":"https://feed.craftedsignal.io/briefs/2026-10-ibm-verify-hardcoded-creds/"}],"language":"en","title":"CraftedSignal Threat Feed - Security Verify Access (10.0.9.3)","version":"https://jsonfeed.org/version/1.1"}