XML External Entity Injection Vulnerability in IBM TRIRIGA Application Platform
CVE-2026-93891

7.6HIGH

Key Information:

Vendor

IBM
Status
Tririga Application Platform
Vendor
CVE Published:
12 October 2026

What is CVE-2026-93891?

The IBM TRIRIGA Application Platform versions 5.0.0 through 5.0.8 contain a vulnerability that could allow remote authenticated attackers to exploit an XML external entity (XXE) injection flaw. This flaw can be leveraged to access sensitive information, potentially compromising user data and system integrity. It is crucial for users of the TRIRIGA platform to implement available updates and patches to mitigate the risk associated with this vulnerability.

Affected Version(s)

TRIRIGA Application Platform 5.0.0 <= 5.0.8

References

https://www.ibm.com/support/pages/node/7292036
vendor-advisorypatch

CVSS V3.1

Score:
7.6
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.