IBM Fixes 22 Flaws in Verify Identity Access, Including Code Execution Without a Login

On October 7, 2026, IBM published fixes for 22 flaws in IBM Verify Identity Access, its self-managed identity and access management platform, and in IBM Security Verify Access. Two let an attacker with no login run code, while two more let an attacker get past authentication checks.