---
id: CVE-2026-87800
title: IBM Cyber Fraud includes components with multiple known vulnerabilities
summary: >-
  IBM Cyber Fraud 1.0.0 through 1.0.2 could allow a remote authenticated
  attacker to execute arbitrary code due to unrestricted upload of a file with a
  dangerous type.
severity: medium
cvss: 6.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N'
cvssSource: cna
cwe:
  - CWE-434
vendor: IBM
product: Cyber Fraud
affected:
  - cyber_fraud >= 1.0.0 <= 1.0.2
published: '2026-10-20'
updated: '2026-10-20'
sourceUpdated: '2026-10-20T21:54:29.497Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-87800'
references:
  - url: 'https://www.ibm.com/support/pages/node/7290671'
tags:
  - cve.org
ingestedAt: '2026-10-20T22:23:33.692Z'
---

## Overview

IBM Cyber Fraud 1.0.0 through 1.0.2 could allow a remote authenticated attacker to execute arbitrary code due to unrestricted upload of a file with a dangerous type.

## Affected

- `cyber_fraud >= 1.0.0 <= 1.0.2`

## Remediation

IBM strongly encourages customers to update their systems promptly.



Please upgrade to at least version 1.1.0 according to the following instructions:

 https://www.ibm.com/docs/en/cyber-fraud/1.x?topic=installing-cyber-fraud 



 https://www.ibm.com/docs/en/cyber-fraud/1.x?topic=upgrading-cyber-fraud