CVE-2026-2713

IBM Trusteer Rapport installer 3.5.2309.290 IBM Trusteer Rapport could allow a local attacker to execute arbitrary code on the system, caused by DLL uncontrolled search path element vulnerability. By placing a specially crafted file in a compromised folder, an attacker could exploit this vulnerability to execute arbitrary code on the system.

Score

CVSS 3.1 7.8 High

Status

Analyzed - psirt@us.ibm.com

Published

2026-03-10

Last modified

2026-03-10

Weaknesses

CWE-427

Affected products

• Trusteer Rapport (Ibm)
• Trusteer Rapport Installer (Ibm)

References

• https://www.ibm.com/support/pages/node/7263031