Remote Information Disclosure Vulnerability in IBM TRIRIGA Application Platform
CVE-2026-93892

8.1HIGH

Key Information:

Vendor

IBM
Status
Tririga Application Platform
Vendor
CVE Published:
12 October 2026

What is CVE-2026-93892?

The IBM TRIRIGA Application Platform versions 5.0.0 to 5.0.8 are susceptible to an information disclosure vulnerability that allows a remote authenticated attacker to gain unauthorized access to sensitive data. This issue is primarily caused by the exposure of session tokens in the HTML response, which can be exploited to access user sessions and confidential information.

Affected Version(s)

TRIRIGA Application Platform 5.0.0 <= 5.0.8

References

https://www.ibm.com/support/pages/node/7292035
vendor-advisorypatch

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.