Live › vulnerability › CVE-2026-87800
Go to dashboardIBM Cyber Fraud versions 1.0.0 through 1.0.2 do not restrict the types of files users can upload. A remote attacker with a valid account could upload a dangerous file and execute arbitrary code.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
1.0.2 once a fixed release is named in the IBM bulletinEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
IBM Cyber Fraud 1.0.0 through 1.0.2 could allow a remote authenticated attacker to execute arbitrary code due to unrestricted upload of a file with a dangerous type.
This page as .md · .json · in your agent: get_signal("CVE-2026-87800")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.