MEDIUMCVSS 5.3Vulnerability

CVE-2026-8861

IBM Security Verify could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.  This information could be used in further attacks against the system.

Properties

severity
MEDIUM
cvss_severity
MEDIUM
cvss_score
5.3
epss_score
0.00402
retrieved_at
2026-09-25T21:32:20+00:00
last_source
FIRST EPSS
score
5.3
cve_id
CVE-2026-8861
cvss_vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
signal_observed_at
2026-09-11T17:55:57+00:00
vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
published_at
2026-07-17T20:17:31.760
last_modified
2026-08-11T15:30:10.600
epss_percentile
0.31703

Related Entities (7)

ENRICHED_BY (1)

→[Source]FIRST EPSS

HAS_WEAKNESS (1)

→[Weakness]Generation of Error Message Containing Sensitive Information

DESCRIBED_BY (1)

→[Source]NVD

AFFECTS_PRODUCT (4)

→[Product]
→[Product]
→[Product]
→[Product]

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-8861 (CVSS 5.3) — Ninja Signal Threat Intelligence | Ninja Signal