Critical Security Update: IBM Patches Multiple Vulnerabilities in Verify Identity and Access

IBM published a security advisory for multiple vulnerabilities in its Verify Identity Access and Security Verify Access products, highlighting a CVSS 9.3 root privilege escalation (CVE-2026-1346) and an 8.1 authentication bypass (CVE-2026-4101). Other issues include script inclusion, OS command injection, SSRF, XSS, and HTTP request smuggling; both appliance and containerized deployments are affected and administrators are advised to apply v10.0.9.1 IF1 or v11.0.2 IF1 updates promptly.