CVE-2026-1343

CVE-2026-1343 is an authentication bypass vulnerability affecting IBM Verify Identity Access and IBM Security Verify Access products, specifically versions 11.0 through 11.0.2 and 10.0 through 10.0.9.1 in both container and non-container deployments. The vulnerability allows attackers to contact internal authentication endpoints that should be protected by the Reverse Proxy, potentially circumventing security controls. The vulnerability carries a CVSS severity rating of 7.2 (HIGH) with a network-based attack vector requiring no authentication or user interaction, making it relatively easy to exploit. The attack has broad scope and could result in limited confidentiality and integrity impacts, though availability is not affected. Current exploitation activity is minimal, with no evidence of active exploitation in the wild and the vulnerability not appearing on the CISA Known Exploited Vulnerabilities list. Community attention remains low as indicated by its position below the 0.16th percentile in exploit prediction scores, though the FAUCET Risk Score of 47.0 suggests moderate organizational risk warranting remediation efforts.