{"affected":[{"product":"Security Verify Directory","source":"CNA: ibm","vendor":"IBM","versions":[{"lessThanOrEqual":"10.0.4","status":"affected","version":"10.0.0","versionType":"semver"}]},{"product":"Verify Directory","source":"CNA: ibm","vendor":"IBM","versions":[{"status":"affected","version":"11.0.0"}]}],"cveId":"CVE-2026-8639","cwes":["CWE-384"],"description":"IBM Security Verify Directory 10.0.0 through 10.0.4 and IBM Verify Directory 11.0.0 is vulnerable to session fixation. An attacker can establish a session and, after the victim authenticates, hijack the authenticated session to gain unauthorized access to the directory management console.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":8.8,"severity":"high","source":"CNA: ibm","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1794163482607,"publishedAt":1794163482607,"references":[{"source":"CNA: ibm","tags":["vendor-advisory","patch"],"url":"https://www.ibm.com/support/pages/node/7293828"}],"remediation":[{"kind":"fix","source":"CNA: ibm","text":"IBM strongly encourages customers to update their systems promptly.\n\n\n\n\n\nProduct(s)Affected Version(s)FixIBM Security Verify Directory10.0.0-10.0.4Download and install IBM Security Verify Directory v10.0.4.4\nDownload document -  https://www.ibm.com/support/pages/node/7292855 IBM Verify Directory11.0.0Download and install IBM Verify Directory v11.0.1.2\nDownload document -  https://www.ibm.com/support/pages/node/7290214"},{"kind":"fix","source":"CNA: ibm","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://www.ibm.com/support/pages/node/7293828"}],"revision":"c9a636062e2b51b5a50d066793e3669ceced503cdf08a6551f838f3c65f158b4","sources":[{"modifiedAt":1794163482607,"name":"CNA: ibm","retrievedAt":1794164953710,"url":"https://www.cve.org/CVERecord?id=CVE-2026-8639"}],"ssvc":null,"status":"published","title":"IBM Verify Directory is affected by multiple vulnerabilities","updatedAt":1794164953710}