CVE-2026-87800 PUBLISHED

IBM Cyber Fraud includes components with multiple known vulnerabilities

Assigner: ibm
Reserved: 09.09.2026 Published: 20.10.2026 Updated: 21.10.2026

IBM Cyber Fraud 1.0.0 through 1.0.2 could allow a remote authenticated attacker to execute arbitrary code due to unrestricted upload of a file with a dangerous type.

Metrics

CVSS 3.1

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N
CVSS Score: 6.8

Attack Vector	Network	Scope	Changed
Attack Complexity	Low	Confidentiality Impact	High
Privileges Required	Low	Integrity Impact	None
User Interaction	Required	Availability Impact	None

CVSS 3.1

Product Status

Vendor	IBM
Product	Cyber Fraud
Versions	affected from 1.0.0 to 1.0.2 (incl.)

Solutions

IBM strongly encourages customers to update their systems promptly.

Please upgrade to at least version 1.1.0 according to the following instructions:

https://www.ibm.com/docs/en/cyber-fraud/1.x?topic=installing-cyber-fraud

https://www.ibm.com/docs/en/cyber-fraud/1.x?topic=upgrading-cyber-fraud

References

https://www.ibm.com/support/pages/node/7290671

Problem Types

CWE-434 Unrestricted Upload of File with Dangerous Type CWE