CVE-2026-87800

IBM Cyber Fraud 1.0.0 through 1.0.2 could allow a remote authenticated attacker to execute arbitrary code due to unrestricted upload of a file with a dangerous type.

Score

CVSS 3.1 6.8 Medium

Status

Awaiting Analysis - psirt@us.ibm.com

Published

2026-10-20

Last modified

2026-10-21

Weaknesses

CWE-434

Affected products

• Cyber Fraud (Ibm)

References

• https://www.ibm.com/support/pages/node/7290671