Sensitive Cookie Transmission Flaw in IBM Cyber Fraud Software
CVE-2026-9825

3.7LOW

Key Information:

Vendor

IBM
Status
Cyberfraud
Vendor
CVE Published:
20 October 2026

What is CVE-2026-9825?

IBM Cyber Fraud versions 1.0.0 through 1.0.2 are vulnerable due to a missing secure attribute that inadequately protects sensitive cookies. This flaw permits cookies to be sent over unencrypted connections, raising the risk of interception by an attacker via network-based methods. Such interception could lead to unauthorized access to session data and critical information, impacting user security and privacy.

Affected Version(s)

CyberFraud 1.0.0 <= 1.0.2

References

https://www.ibm.com/support/pages/node/7290671
vendor-advisorypatch

CVSS V3.1

Score:
3.7
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.