CVE-2026-87800: IBM Cyber Fraud includes components with multiple known vulnerabilities
Published Oct 20, 2026
·Updated
IBM Cyber Fraud 1.0.0 through 1.0.2 could allow a remote authenticated attacker to execute arbitrary code due to unrestricted upload of a file with a dangerous type.
Affected Software
1 affected component
IBM Cyber Fraud>=1.0.0<=1.0.2
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Cyber Fraudto a version that resolves this vulnerability.Fixed in 1.1.0
Event History
Oct 20, 2026
CVE Published
via MITRE·09:53 PM
Data Sourced
via MITRE·09:53 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
Which deployments are affected?
IBM Cyber Fraud versions 1.0.0 through 1.0.2 are affected.
2
What access does an attacker need to exploit this issue?
An attacker must be remotely authenticated and able to upload a file. Exploitation also requires user interaction.
3
What could a successful attacker do?
A successful attacker could execute arbitrary code by uploading a file with a dangerous type.