---
id: CVE-2026-107400
title: Security Vulnerability identified in IBM TRIRIGA - GWT Mock Authentication
summary: >-
  IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote
  authenticated attacker to execute arbitrary code due to improper
  authentication.
severity: high
cvss: 8.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
cwe:
  - CWE-287
vendor: IBM
product: TRIRIGA Application Platform
affected:
  - tririga_application_platform >= 5.0.0 <= 5.0.8
published: '2026-10-19'
updated: '2026-10-19'
sourceUpdated: '2026-10-19T23:46:46.720Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-107400'
references:
  - url: 'https://www.ibm.com/support/pages/node/7292418'
tags:
  - cve.org
ingestedAt: '2026-10-20T00:48:34.161Z'
---

## Overview

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper authentication.

## Affected

- `tririga_application_platform >= 5.0.0 <= 5.0.8`

## Remediation

Customers using affected versions of IBM TRIRIGA should upgrade to IBM TRIRIGA Application Platform 5.0.9 or a later supported release containing the fix. IBM recommends applying the latest available maintenance to ensure protection against this vulnerability.







Reference :



 https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7ETivoli&product=ibm/Tivoli/IBM+TRIRIGA+Application+Platform&release=5.0.9&platform=All&function=all