CVE-2026-87800Medium· 6.8▾ SunlitIBM Cyber Fraud 1.0.0 through 1.0.2 could allow a remote authenticated attacker to execute arbitrary code due to unrestricted upload of a file with a dangerous type.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 37.4 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
IBM Cyber Fraud 1.0.0 through 1.0.2 could allow a remote authenticated attacker to execute arbitrary code due to unrestricted upload of a file with a dangerous type.
cyber_fraud >= 1.0.0 <= 1.0.2IBM strongly encourages customers to update their systems promptly.
Please upgrade to at least version 1.1.0 according to the following instructions:
https://www.ibm.com/docs/en/cyber-fraud/1.x?topic=installing-cyber-fraud
https://www.ibm.com/docs/en/cyber-fraud/1.x?topic=upgrading-cyber-fraud
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-9825Low· 3.7IBM Cyber Fraud Reachable Assertion
CVE-2026-94402Medium· 6.1IBM vulnerable to cross-site scripting (XSS) via unsanitized title truncation
CVE-2026-93888High· 7.8IBM Sterling Connect:Direct for Unix Buffer Overflow
CVE-2026-82891High· 8.1IBM Guardium Data Protection is affected by a security vulnerability
CVE-2026-93744Medium· 6.5IBM i Improper Authentication
CVE-2026-93442High· 8.2IBM QRadar SIEM Out-of-bounds Read