CVE-2026-8639highCWE-384

CVE-2026-8639: falha de alta gravidade em IBM Verify Directory

IBM Verify Directory is affected by multiple vulnerabilities

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Security Verify Directory+ Monitorar Verify Directory

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.8epss 0.3%
IBM Security Verify Directory 10.0.0 through 10.0.4 and IBM Verify Directory 11.0.0 is vulnerable to session fixation. An attacker can establish a session and, after the victim authenticates, hijack the authenticated session to gain unauthorized access to the directory management console.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
IBM · Security Verify DirectoryIBM · Verify Directory
CVEs relacionadas — IBM Verify Directory

No mesmo produto, das mais perigosas para as menos.

CVE-2024-51450CRITICALIBM Security Verify Directory Command ExecutionEPSS 1.1%CVE-2022-32756LOWIBM Security Verify Directory information disclosureEPSS 0.5%CVE-2022-32751MEDIUMIBM Security Verify Directory information disclosureEPSS 0.5%CVE-2024-45650HIGHIBM Security Verify Directory denial of serviceEPSS 0.4%CVE-2022-32754MEDIUMIBM Security Verify Directory cross-site scriptingEPSS 0.3%CVE-2026-8860MEDIUMIBM Verify Directory is affected by multiple vulnerabilitiesEPSS 0.3%