{"affected":[{"product":"Security Verify Directory","source":"CNA: ibm","vendor":"IBM","versions":[{"lessThanOrEqual":"10.0.4","status":"affected","version":"10.0.0","versionType":"semver"}]},{"product":"Verify Directory","source":"CNA: ibm","vendor":"IBM","versions":[{"status":"affected","version":"11.0.0"}]}],"cveId":"CVE-2026-8860","cwes":["CWE-650"],"description":"IBM Security Verify Directory 10.0.0 through 10.0.4 and IBM Verify Directory 11.0.0 accepts GET requests for authentication, allowing credentials to be passed as URL parameters. This causes passwords to be exposed in browser history and server logs.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":6.5,"severity":"medium","source":"CNA: ibm","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"}],"modifiedAt":1794163572242,"publishedAt":1794163572242,"references":[{"source":"CNA: ibm","tags":["vendor-advisory","patch"],"url":"https://www.ibm.com/support/pages/node/7293828"}],"remediation":[{"kind":"fix","source":"CNA: ibm","text":"IBM strongly encourages customers to update their systems promptly.\n\n\n\n\n\nProduct(s)Affected Version(s)FixIBM Security Verify Directory10.0.0-10.0.4Download and install IBM Security Verify Directory v10.0.4.4\nDownload document -  https://www.ibm.com/support/pages/node/7292855 IBM Verify Directory11.0.0Download and install IBM Verify Directory v11.0.1.2\nDownload document -  https://www.ibm.com/support/pages/node/7290214"},{"kind":"fix","source":"CNA: ibm","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://www.ibm.com/support/pages/node/7293828"}],"revision":"f20f45c7eb09f4eb25621efc904731f30f97e0e017cd0e11af8e14c5219f0f0d","sources":[{"modifiedAt":1794163572242,"name":"CNA: ibm","retrievedAt":1794164957048,"url":"https://www.cve.org/CVERecord?id=CVE-2026-8860"}],"ssvc":null,"status":"published","title":"IBM Verify Directory is affected by multiple vulnerabilities","updatedAt":1794164957048}