CVE-2026-107400: Security Vulnerability identified in IBM TRIRIGA - GWT Mock Authentication
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper authentication.
Other sources
IBM TRIRIGA could allow a remote authenticated attacker to execute arbitrary code due to improper authentication.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM TRIRIGA Application Platformto a version that resolves this vulnerability.Fixed in 5.0.9
Event History
Frequently Asked Questions
Who can exploit this vulnerability?
A remote attacker who is authenticated to the affected IBM TRIRIGA Application Platform can exploit it. The provided data does not indicate that unauthenticated attackers can do so.
What is the potential impact of successful exploitation?
Successful exploitation could allow arbitrary code execution. The supplied severity vector indicates high impacts to confidentiality, integrity, and availability.
Which versions should be prioritized for remediation?
IBM TRIRIGA Application Platform versions 5.0.0 through 5.0.8 are identified as affected.