{"id":"CVE-2026-107400","title":"Security Vulnerability identified in IBM TRIRIGA - GWT Mock Authentication","summary":"IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper authentication.","severity":"high","cvss":8.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvssSource":"cna","cwe":["CWE-287"],"vendor":"IBM","product":"TRIRIGA Application Platform","affected":["tririga_application_platform >= 5.0.0 <= 5.0.8"],"published":"2026-10-19","updated":"2026-10-19","sourceUpdated":"2026-10-19T23:46:46.720Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-107400","references":[{"url":"https://www.ibm.com/support/pages/node/7292418"}],"tags":["cve.org"],"ingestedAt":"2026-10-20T00:48:34.161Z","slug":"CVE-2026-107400","body":"## Overview\n\nIBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper authentication.\n\n## Affected\n\n- `tririga_application_platform >= 5.0.0 <= 5.0.8`\n\n## Remediation\n\nCustomers using affected versions of IBM TRIRIGA should upgrade to IBM TRIRIGA Application Platform 5.0.9 or a later supported release containing the fix. IBM recommends applying the latest available maintenance to ensure protection against this vulnerability.\n\n\n\n\n\n\n\nReference :\n\n\n\n https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7ETivoli&product=ibm/Tivoli/IBM+TRIRIGA+Application+Platform&release=5.0.9&platform=All&function=all","depth":"twilight","depthScore":48,"depthScoreParts":{"impact":48.4,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}