CVE-2026-108290 · Vendor
NO FIX YET
IBM Cyber Fraud versions 1.0.0 through 1.1.0 have overly permissive network policies. An attacker with local access to a container can extract sensitive information.
first public Nov 13, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Teams running IBM Cyber Fraud 1.0.0 through 1.1.0 in containers are exposed, since the flaw is in the container's network policies and an attacker needs local access to a container. The sources do not describe the exact network policy configuration or which deployments are affected beyond that.
Not affected if other-versions
Who cares containers, ibm-cyber-fraud
IBM Cyber Fraud versions 1.0.0 through 1.1.0 are deployed in your containersNo fix yet, per the sources.
IBM Cyber Fraud 1.0.0 through 1.1.0 could allow an attacker with local access to a container to extract sensitive information due to unrestrictive network policies.
This page as .md · .json · CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.