CVE-2026-110273: Security Vulnerability identified in IBM TRIRIGA - Command Execution
Published Nov 5, 2026
·Updated
IBM TRIRIGA Application Platform 5.0.0 through 5.0.9 IBM TRIRIGA could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.
Affected Software
1 affected component
IBM TRIRIGA Application Platform<=5.0.0 - 5.0.9
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM TRIRIGA Application Platformto a version that resolves this vulnerability.Fixed in 5.0.10
Event History
Nov 5, 2026
CVE Published
via IBM·12:00 AM
Data Sourced
via IBM·12:00 AM
DescriptionAffected Software
Nov 8, 2026
CVE Published
via MITRE·04:57 PM
Data Sourced
via MITRE·04:57 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·05:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which deployments are affected?
IBM TRIRIGA Application Platform versions 5.0.0 through 5.0.9 are affected.
2
What access does an attacker need to exploit this issue?
An attacker must be remotely authenticated and have privileges sufficient to reach the vulnerable functionality. No user interaction is required.
3
What is the potential impact of successful exploitation?
A successful attacker could execute arbitrary code on the affected system. The listed impact includes high confidentiality, integrity, and availability effects.