Remote Code Execution Vulnerability in IBM Cyber Fraud Software
CVE-2026-87800

6.8MEDIUM

Key Information:

Vendor

IBM
Status
Cyber Fraud
Vendor
CVE Published:
20 October 2026

What is CVE-2026-87800?

IBM Cyber Fraud versions 1.0.0 through 1.0.2 contain a vulnerability that allows remote authenticated attackers to execute arbitrary code. This issue stems from the application’s failure to properly restrict file uploads, allowing an attacker to upload files of types that are not adequately controlled, potentially leading to system compromise. It is crucial for users to apply the latest security patches provided by IBM to mitigate this risk.

Affected Version(s)

Cyber Fraud 1.0.0 <= 1.0.2

References

https://www.ibm.com/support/pages/node/7290671
vendor-advisorypatch

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.