CVE-2026-9825

IBM Cyber Fraud 1.0.0 through 1.0.2 has a missing secure attribute allowing sensitive cookies to be transmitted over unencrypted connections, potentially enabling an attacker to intercept session data through network-based attacks.

Score

CVSS 3.1 3.7 Low

Status

Awaiting Analysis - psirt@us.ibm.com

Published

2026-10-20

Last modified

2026-10-21

Weaknesses

CWE-617

Affected products

• Cyber Fraud (Ibm)

References

• https://www.ibm.com/support/pages/node/7290671